~ ZHPDiag v2020.9.11.230 Par Nicolas Coolman (2020/09/11)
~ Démarré par Magic Pc (Administrator) (2020/09/13 12:45:58)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Magic Pc\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Magic Pc\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 18362) =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (1) - 0s
~ MSIE: Internet Explorer v11.1016.18362.0

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (2) - 3s
~ Windows Server License Manager Script : OK
Windows Automatic Updates : KO

---\\ LOGICIELS DE PROTECTION (1) - 6s
Windows Defender W10 (Activate) (Protection)

---\\ LOGICIELS DE PARTAGE P2P (1) - 6s
~ µTorrent v3.5.5.45798 (P2P)

---\\ INFORMATIONS SUR LE SYSTÈME (6) - 0s
~ Operating System: AMD64 Family 22 Model 48 Stepping 1, AuthenticAMD
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3371.348 MB (19% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 334 GB (74%) free of 450 GB : OK =>.Disk Space

---\\ MODE DE CONNEXION AU SYSTÈME (3) - 0s
~ Computer Name: DESKTOP-E1095U5
~ User Name: Magic Pc
~ Logged in as Administrator

---\\ ÉNUMÉRATION DES UNITÉS DE STOCKAGE (3) - 0s
~ Drive C: has 334 GB free of 450 GB (System)
~ Drive D: has 156 GB free of 208 GB
~ Drive E: has 210 GB free of 294 GB

---\\ ÉTAT DU CENTRE DE SÉCURITÉ WINDOWS (7) - 1s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ RECHERCHE PARTICULIÈRE DE FICHIERS GÉNÉRIQUES (26) - 7s
[MD5.800EF617DDC3C635CD25E20E0EC39CC6] - 07/09/2020 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4625184] =>.Microsoft®
[MD5.F68AF942FD7CCC0E7BAB1A2335D2AD26] - 19/03/2019 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [71168] [Unsigned] =>.Microsoft Corporation
[MD5.E83650F70459A027AA596E1A73C961A1] - 07/09/2020 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [398728] [Unsigned] =>.Microsoft Corporation
[MD5.5D2F4F7CCC70ADCFEE99C56CBF09F18E] - 07/09/2020 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [5040640] [Unsigned] =>.Microsoft Corporation
[MD5.F85DEFC2BE480CB713D2F179CB5782E0] - 07/09/2020 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [845312] [Unsigned] =>.Microsoft Corporation
[MD5.8BA955BD719207F590EC8C5F2B46AE59] - 07/09/2020 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [307712] [Unsigned] =>.Microsoft Corporation
[MD5.F74E30253F4CCE6A187B2DD32FEC28AF] - 07/09/2020 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [822800] =>.Microsoft®
[MD5.998F5C380961FB7BB8BB6FAED7E3A481] - 07/09/2020 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [593480] =>.Microsoft®
[MD5.95336878FE34E39BC21F8BF5C60448C0] - 07/09/2020 - (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [3109376] [Unsigned] =>.Microsoft Corporation
[MD5.4BB305AEED92BB280760B127548E1DC2] - 19/03/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] [Unsigned] =>.Microsoft Corporation
[MD5.017CD5584E84C924BC0877D33728B186] - 07/09/2020 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [661816] [Unsigned] =>.Microsoft Corporation
[MD5.30D7EEDAB3671A5DF808D1836CCACF56] - 07/09/2020 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [30008] [Unsigned] =>.Microsoft Corporation
[MD5.3E9C20ED02FAA6D194C060BC6E7D587E] - 07/09/2020 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [100352] [Unsigned] =>.Microsoft Corporation
[MD5.81E3779064C04790E30F25770F0AEADD] - 19/03/2019 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173056] [Unsigned] =>.Microsoft Corporation
[MD5.D974C10E19DDC10622E30904AEE16FA3] - 19/03/2019 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [151040] [Unsigned] =>.Microsoft Corporation
[MD5.1D742547071FC1436ED72A3F9DB6E1F0] - 07/09/2020 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [114688] [Unsigned] =>.Microsoft Corporation
[MD5.B475892255B02D33CF29B24FBD4AFDC9] - 19/03/2019 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [119296] [Unsigned] =>.Microsoft Corporation
[MD5.5E05C0FEA671B910FEBC634E796C38B5] - 19/03/2019 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [224768] [Unsigned] =>.Microsoft Corporation
[MD5.90D2833915ACAF0F11F99B330CF2250A] - 07/09/2020 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [561464] [Unsigned] =>.Microsoft Corporation
[MD5.729ED379D3A960CFBE02C7634651AC63] - 07/09/2020 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [337408] [Unsigned] =>.Microsoft Corporation
[MD5.F1FD1D57C6DCEDAC991529D3E17DBB11] - 07/09/2020 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2698048] [Unsigned] =>.Microsoft Corporation
[MD5.AC682BC99BECA3A6C8C71234A9BC4225] - 19/03/2019 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [108032] [Unsigned] =>.Microsoft Corporation
[MD5.555E33527CC3C34620E49F5F86C8F7B0] - 19/03/2019 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [112128] [Unsigned] =>.Microsoft Corporation
[MD5.51D49770FD9D2E1956833C1F4D992893] - 07/09/2020 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [167936] [Unsigned] =>.Microsoft Corporation
[MD5.9AF99FB2DA176C88C68D886046C56B01] - 19/03/2019 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [132616] [Unsigned] =>.Microsoft Corporation
[MD5.7764E62EF94DDA90E87309E739F6970E] - 07/09/2020 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [429880] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES SERVICES (Non désactivés) (56) - 10s
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\WINDOWS\System32\atiesrxx.exe [Unsigned] =>.AMD
O23 - Service: C:\WINDOWS\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Générateur de points de terminaison du serv.) - C:\WINDOWS\System32\AudioEndpointBuilder.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Service Audio Windows.) - C:\WINDOWS\System32\Audiosrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\bfe.dll (BFE) . (.Microsoft Corporation - Moteur de filtrage de base.) - C:\WINDOWS\System32\bfe.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\WINDOWS\System32\psmsrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Composants utilisateur Microsoft (R) CDP.) - C:\WINDOWS\System32\CDPUserSvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service pour utilisateur de plateforme d’appareils connecté (CDPUserSvc_40a6d) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Services de chiffrement.) - C:\WINDOWS\System32\cryptsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - Service client DHCP.) - C:\Windows\System32\dhcpcore.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Suivi des diagnostics Microsoft Windows.) - C:\WINDOWS\System32\diagtrack.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\dispbroker.desktop.dll (DispBrokerDesktopSvc) . (.Microsoft Corporation - Courtier d'affichage du bureau.) - C:\WINDOWS\System32\DispBroker.Desktop.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - Service de résolution du cache DNS.) - C:\WINDOWS\System32\dnsrslvr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\dosvc.dll (DoSvc) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\WINDOWS\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Service Consommation des données.) - C:\WINDOWS\System32\dusmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Service journal des événements.) - C:\WINDOWS\System32\wevtsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Service de cache de police Windows.) - C:\WINDOWS\System32\FntCache.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) - C:\WINDOWS\System32\gpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) - C:\WINDOWS\System32\iphlpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - DLL du service Serveur.) - C:\WINDOWS\System32\srvsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - DLL du service Station de travail.) - C:\WINDOWS\System32\wkssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\lsm.dll (LSM) . (.Microsoft Corporation - Service du gestionnaire de session locale.) - C:\WINDOWS\System32\lsm.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\moshost.dll (MapsBroker) . (.Microsoft Corporation - Gestionnaire des cartes téléchargées.) - C:\WINDOWS\System32\moshost.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Service de protection Microsoft.) - C:\WINDOWS\System32\mpssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) - C:\WINDOWS\System32\nlasvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Serveur RPC de l’interface du magasin résea.) - C:\WINDOWS\System32\nsisvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\WINDOWS\System32\APHostService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Hôte de synchronisation_40a6d (OneSyncSvc_40a6d) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\WINDOWS\System32\umpo.dll (Power) . (.Microsoft Corporation - Service d’alimentation en mode utilisateur.) - C:\WINDOWS\System32\umpo.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\WINDOWS\System32\profsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) - C:\WINDOWS\System32\rasmans.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - Mappeur de point de terminaison RPC.) - C:\WINDOWS\System32\RpcEpMap.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\WINDOWS\System32\rpcss.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) - C:\WINDOWS\System32\schedsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\Sens.dll (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) - C:\WINDOWS\System32\sens.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\SgrmBroker.exe,-100 (SgrmBroker) . (.Microsoft Corporation - Service Broker du moniteur d'exécution Syst.) - C:\WINDOWS\System32\SgrmBroker.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) - C:\Windows\System32\shsvcs.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Application sous-système spouleur.) - C:\WINDOWS\System32\spoolsv.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Service de la plateforme de protection logi.) - C:\WINDOWS\System32\sppsvc.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wiaservc.dll (stisvc) . (.Microsoft Corporation - Service de périphériques d’images fixes.) - C:\WINDOWS\System32\wiaservc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Hôte de Service SysMain.) - C:\WINDOWS\System32\sysmain.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) - C:\WINDOWS\System32\SystemEventsBrokerServer.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\themeservice.dll (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) - C:\WINDOWS\System32\themeservice.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\WINDOWS\System32\usermgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\usosvc.dll (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) - C:\WINDOWS\System32\usosvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: WC Assistant (WCAssistantService) . (. =>PUP.Optional.LavasoftWebCompanion - SPWindowsService.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe =>PUP.Optional.LavasoftWebCompanion
O23 - Service: C:\WINDOWS\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - DLL du service de gestion des connexions Wi.) - C:\WINDOWS\System32\wcmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (.Microsoft Corporation - Antimalware Service Executable.) - C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2008.9-0\MsMpEng.exe =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\WINDOWS\System32\wbem\WMIsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wlansvc.dll (WlanSvc) . (.Microsoft Corporation - DLL du service de configuration automatique.) - C:\WINDOWS\System32\wlansvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) - C:\WINDOWS\System32\WpnService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Service utilisateur de notifications Push W.) - C:\WINDOWS\System32\WpnUserService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service utilisateur de notifications Push Windows_40a6d (WpnUserService_40a6d) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\WINDOWS\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Service Centre de sécurité de Windows.) - C:\WINDOWS\System32\wscsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - C:\Windows\System32\SearchIndexer.exe [Unsigned] =>.Microsoft Corporation

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (69) - 33s
SR - Boot [19/03/2019] [ 107528] (3ware) . (.LSI.) - C:\WINDOWS\System32\drivers\3ware.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 1135632] (ADP80XX) . (.PMC-Sierra.) - C:\WINDOWS\System32\drivers\ADP80XX.SYS =>.Microsoft Windows®
SR - Auto [16/05/2017] [ 551808] (AMD External Events Utility) . (.AMD.) - C:\WINDOWS\System32\atiesrxx.exe =>.Advanced Micro Devices, Inc.®
SR - Demand [19/03/2019] [ 18432] AMD GPIO Client Driver (amdgpio2) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio2.sys [Unsigned] =>.Advanced Micro Devices, Inc
SR - Demand [19/03/2019] [ 37888] AMD I2C Controller Service (amdi2c) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdi2c.sys [Unsigned] =>.Advanced Micro Devices, Inc
SR - Demand [12/06/2017] [ 95080] AMD Kernel Mode CSP Service (amdkmcsp) . (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\DRIVERS\amdkmcsp.sys =>.Advanced Micro Devices Inc.®
SR - Demand [16/05/2017] [36558208] (amdkmdag) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys =>.Advanced Micro Devices, Inc.®
SR - Demand [16/05/2017] [ 528760] (amdkmdap) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys =>.Advanced Micro Devices, Inc.®
SR - Boot [16/05/2017] [ 97672] AMD PCI Root Bus Lower Filter (amdkmpfd) . (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\drivers\amdkmpfd.sys =>.Advanced Micro Devices, Inc.®
SR - Boot [19/03/2019] [ 83464] (amdsata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdsata.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 259600] (amdsbs) . (.AMD Technologies Inc..) - C:\WINDOWS\System32\drivers\amdsbs.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 27176] (amdxata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdxata.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 132112] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\WINDOWS\System32\drivers\arcsas.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 4233728] Qualcomm Atheros Extens (athr) . (.Qualcomm Atheros Communications, Inc..) - C:\WINDOWS\System32\drivers\athw8x.sys [Unsigned] =>.Qualcomm Atheros Communications, Inc.
SR - Demand [17/11/2017] [ 111112] AMD Function Driver fo (AtiHDAudioService) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\AtihdWT6.sys =>.Microsoft Windows Hardware Compatibility Publisher®
SR - Boot [19/03/2019] [ 534032] QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\bxvbda.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 9728] bcmfn2 Service (bcmfn2) . (...) - C:\WINDOWS\System32\drivers\bcmfn2.sys [Unsigned] =>.Broadcom Corporation
SR - Demand [27/07/2015] [ 618720] BtFilter (BtFilter) . (.Qualcomm Atheros.) - C:\WINDOWS\System32\DRIVERS\btfilter.sys =>.Qualcomm Atheros®
SR - Boot [19/03/2019] [ 319528] (cht4iscsi) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4sx64.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 1866768] Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4vx64.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 3419176] QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\evbda.sys =>.Microsoft Windows®
SS - Demand [31/07/2014] [ 136120] Google Updater Service (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe =>.Google Inc®
SR - Boot [19/03/2019] [ 64528] (HpSAMD) . (.Hewlett-Packard Company.) - C:\WINDOWS\System32\drivers\HpSAMD.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 36352] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iagpio.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [19/03/2019] [ 91136] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iai2c.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [19/03/2019] [ 79360] Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 93184] In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 112128] Intel( (iaLPSS2i_GPIO2_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 96256] Intel( (iaLPSS2i_GPIO2_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 171520] Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 175104] Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 180736] Intel(R) S (iaLPSS2i_I2C_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 177664] Intel(R) S (iaLPSS2i_I2C_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [Unsigned] =>.Intel Corporation
SR - Demand [19/03/2019] [ 38128] Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys =>.Intel Corporation - Client Components Group®
SR - Demand [19/03/2019] [ 113152] Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [Unsigned] =>.Intel Corporation
SR - Boot [19/03/2019] [ 885048] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAVC.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 411960] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorV.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 566800] Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ibbus.sys =>.Microsoft Windows®
SR - Auto [20/12/2018] [ 229296] IDMWFP (IDMWFP) . (.Tonec Inc..) - C:\WINDOWS\System32\DRIVERS\idmwfp.sys =>.Tonec Inc.®
SR - Demand [23/10/2015] [ 4635392] Service for Realtek HD Audio (WDM) (IntcAzAudAddService) . (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp®
SR - Boot [19/03/2019] [ 148520] (ItSas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\ItSas35i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 109064] (LSI_SAS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 124448] (LSI_SAS2i) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 128528] (LSI_SAS3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\lsi_sas3i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 82960] (LSI_SSS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sss.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 59920] (megasas) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 75280] (megasas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\MegaSas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 94736] (megasas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas35i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 576016] (megasr) . (.LSI Corporation, Inc..) - C:\WINDOWS\System32\drivers\megasr.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 1150480] Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\mlx4_bus.sys =>.Microsoft Windows®
SS - Demand [31/08/2020] [ 245968] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Boot [19/03/2019] [ 64016] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\WINDOWS\System32\drivers\mvumis.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 153616] NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ndfltr.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 150544] (nvraid) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvraid.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 166408] (nvstor) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvstor.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 58896] (percsas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 68624] (percsas3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas3i.sys =>.Microsoft Windows®
SR - Demand [29/06/2015] [ 895256] Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp®
SR - Demand [24/06/2015] [ 761600] Realtek PCIE Card Reader - PER (RTSPER) . (.Realsil Semiconductor Corporation.) - C:\WINDOWS\System32\DRIVERS\RtsPer.sys =>.Realtek Semiconductor Corp®
SR - Boot [19/03/2019] [ 45072] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\WINDOWS\System32\drivers\SiSRaid2.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 81936] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\WINDOWS\System32\drivers\sisraid4.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 220176] (SmartSAMD) . (.Microsemi Corportation.) - C:\WINDOWS\System32\drivers\SmartSAMD.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 31240] (stexstor) . (.Promise Technology, Inc..) - C:\WINDOWS\System32\drivers\stexstor.sys =>.Microsoft Windows®
SR - Demand [20/08/2015] [ 61624] Synaptics HID Service (SynRMIHID) . (.Synaptics Incorporated.) - C:\WINDOWS\System32\DRIVERS\SynRMIHID.sys =>.Synaptics Incorporated®
SR - Boot [19/03/2019] [ 166928] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\WINDOWS\System32\drivers\vsmraid.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 305672] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\WINDOWS\System32\drivers\vstxraid.sys =>.Microsoft Windows®
SR - Auto [07/09/2020] [ 29272] WC Assistant (WCAssistantService) . (. =>PUP.Optional.LavasoftWebCompanion.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe =>PUP.Optional.LavasoftWebCompanion =>PUP.Optional.LavasoftWebCompanion
SR - Demand [19/03/2019] [ 37928] WinMad Service (WinMad) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winmad.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 77832] WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winverbs.sys =>.Microsoft Windows®

---\\ TÂCHES PLANIFIÉES EN AUTOMATIQUE (Registre) (6) - 57s
O38 - TASK: {743AC3C3-D318-4CBE-BDA1-753137004D91} [64Bits][\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB] - (.Mozilla Foundation - Firefox Default Browser Agent.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe [660688] =>.Mozilla Foundation
O38 - TASK: {78FD75E0-9D40-4A7F-A1D5-601F71C631F1} [64Bits][\StartCN] - (.Advanced Micro Devices, Inc. - Radeon Settings: Command Line Interface.) -- C:\Program Files\AMD\CNext\CNext\cncmd.exe [52104] =>.Advanced Micro Devices, Inc.
O38 - TASK: {DD629CB7-9574-484D-8D36-4473A5D23591} [64Bits][\AdobeAAMUpdater-1.0-DESKTOP-E1095U5-Magic Pc] - (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936] =>.Adobe Systems Incorporated
C:\WINDOWS\System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - (.Mozilla Foundation.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe [do-task "308046B0AF4A39CB.do-task] =>.Mozilla Foundation
C:\WINDOWS\System32\Tasks\StartCN - (.Advanced Micro Devices, Inc..) -- C:\Program Files\AMD\CNext\CNext\cncmd.exe [startwithdelay] =>.Advanced Micro Devices, Inc.
C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-E1095U5-Magic Pc - (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [-mode=scheduled] =>.Adobe Systems Incorporated

---\\ APPLICATIONS LANCÉES AU DÉMARRAGE DU SYSTÈME (16) - 7s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\WINDOWS\system32\SecurityHealthSystray.exe [Unsigned] =>.Microsoft Corporation
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] . (. - .) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (.Not File.) =>.SUP.Orphan
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Magic Pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - HKCU\..\Run: [Chromium] . (.The Chromium Authors - Chromium.) -- c:\Users\Magic Pc\AppData\Local\chromium\application\chrome.exe [Unsigned] =>.The Chromium Authors
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O4 - HKCU\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe =>PUP.Optional.LavasoftWebCompanion
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKLM\..\Wow6432Node\Run: [Wondershare Helper Compact.exe] . (.Wondershare - Wondershare Studio.) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [Unsigned] =>.Wondershare
O4 - HKUS\S-1-5-21-2676131251-1132033558-194381028-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Magic Pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - HKUS\S-1-5-21-2676131251-1132033558-194381028-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - HKUS\S-1-5-21-2676131251-1132033558-194381028-1001\..\Run: [Chromium] . (.The Chromium Authors - Chromium.) -- c:\Users\Magic Pc\AppData\Local\chromium\application\chrome.exe [Unsigned] =>.The Chromium Authors
O4 - HKUS\S-1-5-21-2676131251-1132033558-194381028-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O4 - HKUS\S-1-5-21-2676131251-1132033558-194381028-1001\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe =>PUP.Optional.LavasoftWebCompanion

---\\ PROCESSUS LANCÉS (27) - 32s
[MD5.D3E9EEDC0128DD1FB9E45D85E7E21F0B] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [551808] [PID.1744] [Unsigned] =>.AMD
[MD5.54065E48F735CADE77A34AF790486C45] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [777088] [PID.2020] [Unsigned] =>.AMD
[MD5.7FAAAF139CA5919E9970B5BC98EC1422] - (. - SPWindowsService.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [29272] [PID.2820] =>PUP.Optional.LavasoftWebCompanion
[MD5.356FFE4ECFB08C92FFE3D75963BF5F12] - (...) -- C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe [943936] [PID.4988] =>.Microsoft®
[MD5.7DECA98ED749AD81AD4E3DE0DD0817DB] - (.Advanced Micro Devices, Inc. - Radeon Settings: Host Application.) -- C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [9366920] [PID.5196] =>.Advanced Micro Devices, Inc.®
[MD5.38F1326F10D3C7192DBB1DB595F9AE4B] - (...) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe [182272] [PID.5652] [Unsigned] =>.Microsoft Corporation
[MD5.B1DA123E731FDBC5F05C29ECA484414D] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16407296] [PID.6236] =>.Realtek Semiconductor Corp®
[MD5.5F5CA94A512DFD245CED4FE83B9E84C4] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5460280] [PID.6588] =>.Tonec Inc.®
[MD5.29F2007F7E9E5C5D214ED6E205746DCA] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe [2117080] [PID.6764] =>BitTorrent (P2P)
[MD5.EEF4B85773FC75991227CC1D7CD73CAA] - (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [8146520] [PID.6784] =>PUP.Optional.LavasoftWebCompanion
[MD5.7631C33878C331D7396679B0C391FCA8] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe [384312] [PID.6864] =>.Tonec Inc.®
[MD5.50102C295657B0C3BFAE08C653F0684C] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\updates\3.5.5_45798\utorrentie.exe [427736] [PID.7120] =>BitTorrent (P2P)
[MD5.50102C295657B0C3BFAE08C653F0684C] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\updates\3.5.5_45798\utorrentie.exe [427736] [PID.5476] =>BitTorrent (P2P)
[MD5.75703AA42A9F166C59B6E6E13F32C21D] - (.BitTorrent Inc. - µTorrent Helper.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\helper\helper.exe [4740328] [PID.6396] =>BitTorrent (P2P)
[MD5.81A0A226114309D195D9B49C30BFD7EF] - (...) -- C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.20070.10002.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe [484352] [PID.5044] [Unsigned] =>.Microsoft Corporation
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.5420] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.6132] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.4316] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.3988] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.1288] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.3844] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.5996] =>.Mozilla Corporation®
[MD5.420C25CF191D23D71CD74401A720A84A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Magic Pc\AppData\Roaming\ZHP\ZHPDiag3.exe [3306368] [PID.6908] [Unsigned] =>.Nicolas Coolman
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.3468] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.6376] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.548] =>.Mozilla Corporation®
[MD5.D301D35720B3E285FAA6F92F07512591] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [599248] [PID.3372] =>.Mozilla Corporation®

---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (21) - 9s
M0 - MFSP: prefs.js [Magic Pc - mvkyktk7.default-release] http://securesearch.org/
P2 - EXT FILE: (.Tonec Inc.) -- C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\extensions\mozilla_cc3@internetdownloadmanager.com.xpi [Unsigned] =>.Tonec Inc
P2 - EXT FILE: (...) -- C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\extensions\{b15ba26a-103f-4788-a5d9-c7af17f4f763}.xpi [Unsigned]
P2 - EXT FILE: (.Default Search Engine - Default-search-engine.) -- C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\searchplugins\yahoo.xml [Unsigned] =>PUP.Optional.BDYahoo
P2 - EXT FILE: (.Legitimate.) -- C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [Unsigned]
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi [Unsigned] =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi [Unsigned] =>.Mozilla Corporation
P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [Unsigned] =>.webcompat.com
P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi [Unsigned] =>.webcompat.com
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\bookmarkbackups =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\crashes =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\datareporting =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\extensions =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\gmp-gmpopenh264 =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\gmp-widevinecdm =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\minidumps =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\saved-telemetry-pings =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\searchplugins =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\security_state =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\sessionstore-backups =>Mozilla Corporation
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\storage =>Mozilla Corporation

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (15) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.org/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.18362.628 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

---\\ INTERNET EXPLORER, Site de confiance et site sensible (3) - 0s
~ IE Restricted Site Good: localhost
IE Restricted Site Good: webcompanion.com =>PUP.Optional.LavasoftWebCompanion
~ Microsoft Internet Explorer Restricted Site(s) Domains: 2(Good) / 0(Bad)

---\\ INTERNET EXPLORER,Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ ÉTUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (29)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (1) - 1s
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll =>.Tonec Inc.®

---\\ RACCOURCIS GLOBAL STARTUP (39) - 22s
O4 - GS\Desktop [Magic Pc]: Format Factory.lnk . (.Free Time Co., Ltd. - FormatFactory.) C:\Program Files\FormatFactory\FormatFactory.exe =>.暇光软件科技（上海）有限公司®
O4 - GS\Desktop [Magic Pc]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - GS\Desktop [Magic Pc]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Magic Pc\AppData\Roaming\ZHP\ZHPDiag3.exe [Unsigned] =>.Nicolas Coolman
O4 - GS\Desktop [Magic Pc]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O4 - GS\Quicklaunch [Magic Pc]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Quicklaunch [Magic Pc]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O4 - GS\sendTo [Magic Pc]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo [Unsigned] =>.Microsoft Corporation
O4 - GS\sendTo [Magic Pc]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo [Unsigned] =>.Microsoft Corporation
O4 - GS\sendTo [Magic Pc]: Format Factory.lnk . (.Free Time Co., Ltd. - FormatFactory.) C:\Program Files\FormatFactory\FormatFactory.exe =>.暇光软件科技（上海）有限公司®
O4 - GS\sendTo [Magic Pc]: Format Player.lnk . (.FreeTime - FormatPlayer.) C:\Program Files\FormatFactory\FormatPlayer.exe =>.暇光软件科技（上海）有限公司®
O4 - GS\sendTo [Magic Pc]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\TaskBar [Magic Pc]: Adobe Premiere Pro CC 2019.lnk . (.Adobe - Adobe Premiere Pro CC 2019.) C:\Program Files\Adobe\Adobe Premiere Pro CC 2019\Adobe Premiere Pro.exe =>.Adobe Systems Incorporated®
O4 - GS\TaskBar [Magic Pc]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Magic Pc]: Wondershare Filmora.lnk . (.Wondershare Software - Wondershare Filmora.) C:\Program Files\Wondershare\Filmora\Filmora.exe [Unsigned] =>.Wondershare Software
O4 - GS\Programs [Magic Pc]: Gestionnaire audio HD.lnk . (.Realtek Semiconductor - .) C:\Program Files (x86)\Realtek\Audio\HDA\RAVCpl64.exe [Unsigned] =>.Realtek Semiconductor
O4 - GS\Programs [Magic Pc]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Magic Pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - GS\CommonDesktop [Public]: Aurora 3D Text & Logo Maker.lnk . (...) C:\Program Files (x86)\Aurora3D\Maker3D\Maker3D.exe [Unsigned]
O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN®
O4 - GS\CommonDesktop [Public]: Wondershare Filmora.lnk . (.Wondershare Software - Wondershare Filmora.) C:\Program Files\Wondershare\Filmora\Filmora.exe [Unsigned] =>.Wondershare Software
O4 - GS\Programs [Public]: Gestionnaire audio HD.lnk . (.Realtek Semiconductor - .) C:\Program Files (x86)\Realtek\Audio\HDA\RAVCpl64.exe [Unsigned] =>.Realtek Semiconductor
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Magic Pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 [Unsigned] =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe [Unsigned] =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CC 2018.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CC 2018.) C:\Program Files\Adobe\Adobe Photoshop CC 2018\Photoshop.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Adobe Premiere Pro CC 2019.lnk . (.Adobe - Adobe Premiere Pro CC 2019.) C:\Program Files\Adobe\Adobe Premiere Pro CC 2019\Adobe Premiere Pro.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe [Unsigned] =>.Microsoft Corporation

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{8d99b12f-bc25-48cd-8269-108795f367ce}: DhcpNameServer = 192.168.100.1 =>.Local IP Adress

---\\ PROTOCOLE ADDITIONNEL (19) - 4s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 0s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation

---\\ CLÉ DE REGISTRE EXPLORER StartupApproved (15) - 1s
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:uTorrent
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Chromium =>.Chromium Team
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan =>.Tonec Inc
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive =>.Microsoft Corporation
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion =>PUP.Optional.LavasoftWebCompanion
[HKEY_USERS\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:uTorrent
[HKEY_USERS\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Chromium =>.Chromium Team
[HKEY_USERS\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan =>.Tonec Inc
[HKEY_USERS\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive =>.Microsoft Corporation
[HKEY_USERS\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion =>PUP.Optional.LavasoftWebCompanion
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AdobeAAMUpdater-1.0 =>.Adobe Inc.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:RTHDVCPL =>.Realtek Semiconductor Corp.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Wondershare Helper Compact.exe =>.Wondershare
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Wondershare Helper Compact.exe =>.Wondershare

---\\ COMPOSANTS ACTIVESETUP INSTALLÉS (ASIC) (5) - 3s
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation®

---\\ LOGICIELS INSTALLÉS (102) - 116s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>BitTorrent (P2P)
O42 - Logiciel: Adobe Photoshop CC 2018 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- PHSP_19_0 [Unsigned] =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Premiere Pro CC 2019 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- PPRO_13_0_3 =>.Adobe Systems Incorporated®
O42 - Logiciel: AMD Radeon Settings - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- WUCCCApp [Unsigned] =>.Advanced Micro Devices, Inc.
O42 - Logiciel: AMD Settings - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {05B6A133-2E68-1700-950A-1B8D85B8ACB8} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: AMD Settings - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C05C6BCE-5E35-9885-11B6-4A743A142B7F} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Aurora 3D Text & Logo Maker version 16.01.07 - (.Aurora3D Software.) [HKLM][64Bits] -- {4F6B6582-B9F6-42B2-AAFC-48E097D07837}_is1 [Unsigned] =>.Aurora3D Software
O42 - Logiciel: Catalyst Control Center Next Localization BR - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization CHS - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization CHT - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {B26D75B8-FAB7-6F8B-767F-BAF975383D91} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization CS - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {36EDC500-E4C0-371C-9865-08450415C1E9} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization DA - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4C2FB7FD-89FD-BA5C-585A-3811F326AD34} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization DE - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {D74218A3-C503-57EF-AC9F-2220082E7ADE} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization EL - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {DA433FCF-90A1-19A5-65A7-FDF82DE4826D} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization ES - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {949F125B-A6CC-5A5E-EEE7-4AC50305C1FA} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization FI - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {20D46801-147B-30AD-7C5A-AC4560A79096} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization FR - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {22C39711-2747-D264-319A-1550BEEAAEC6} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization HU - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {1DBACFDB-5E43-7882-36BD-53526D34BD22} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization IT - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization JA - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {ED75A775-03A7-F214-868D-497748707968} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization KO - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {07BFBD5C-2F63-6828-1B61-B41A44113F3B} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization NL - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E6038D3E-5D87-8DF7-6D05-BE7532C3E73E} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization NO - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization PL - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {FFBFBD1F-B160-A119-7C43-8584FA2E5665} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization RU - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4D1D5407-9B69-6422-629C-8518A26004A4} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization SV - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A8379BAB-59A9-C0A3-8BCC-4852EA403692} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization TH - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {24DF617A-CD23-6E6A-126B-23630D2781CE} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Catalyst Control Center Next Localization TR - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {83DDDFD8-AD42-72F9-E4F1-5456FDB304C9} [Unsigned] =>.Advanced Micro Devices, Inc. (Hidden)
O42 - Logiciel: Filmora 8.3 Resource Pack version 8.3 - (.ask4pc.) [HKLM][64Bits] -- {D9387CFD-5715-4E2E-B273-372FDFB7B549}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora 8.7.0.2 - (.Wondershare.) [HKLM][64Bits] -- Filmora_is1 [Unsigned] =>.Wondershare
O42 - Logiciel: Filmora Action Cam Summer set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {C09D4BFE-2D69-4998-9A23-FFB8A3B6997C}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Artistic Theme Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Artistic Theme Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Autumn Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Autumn Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Blockbuster Vol.3 Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Blockbuster Vol.3 Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Blockbuster Vol.4 Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Blockbuster Vol.4 Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Blockbuster Vol.5 Set (ask4pc) version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Blockbuster Vol.5 Set (ask4pc)_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Bold Themes Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Bold Themes Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Callouts Expansion Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Callouts Expansion Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Chromatic Filters set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {EE3340C1-0C64-4D88-A5F3-C0699E161AB8}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Cinematic Overlay (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {55119BE6-26DB-42D9-A821-3E455DBCAFEE}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Dreamy Theme Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Dreamy Theme Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Entertainment Opener Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Entertainment Opener Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Fireworks Pack (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {4FC67F56-7353-4730-9876-B6B2CE3DCDCD}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Fitness Effects set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {5DCA5FA3-DB06-4115-8CA6-3D706B0D569F}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Gaming Set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {3D59FEEF-5119-4A73-A973-C6E0FDB10FBF}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Geometric Set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {86B65929-A50A-44B8-B5AA-4589C9BF3140}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Good Time Theme Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Good Time Theme Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Halloween Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Halloween Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Horror Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Horror Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Lower Third Expansion Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Lower Third Expansion Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Modern Material Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Modern Material Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora NEO Theme Set version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora NEO Theme Set_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora News Effects set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {73161FAA-92ED-4BB7-A23F-8B57A7AFE31B}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Retro Shapes Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Retro Shapes Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Sci-Fi Effects (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {4C0DC8D0-3DB1-48C4-AC0A-8D60F19D07A6}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Summer Beach Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Summer Beach Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Title Expansion set(ask4pc) version 8.3 - (.ask4pc.) [HKLM][64Bits] -- {116266A2-ECF4-4A96-AEE4-AB97969DC709}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Travel Vol.2 version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Filmora Travel Vol.2_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Filmora Wedding Effects set (ask4pc) version 8.2 - (.ask4pc.) [HKLM][64Bits] -- {1808A2E4-DFBD-4FCF-98FE-3028A0500B3F}_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: FormatFactory 5.4.0.0 - (.Free Time.) [HKLM][64Bits] -- FormatFactory [Unsigned] =>.Free Time
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {7299052b-02a4-4627-81f2-1818da5d550d} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {071c9b48-7c32-4621-a0ac-3f809523288f} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8220EEFE-38CD-377E-8595-13398D740ACE} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {4B6C7001-C7D6-3710-913E-5BC23FCE91E6} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D8E6291-B0D5-35EC-8441-6616F567A0F7} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {37B8F9C7-03FB-3253-8781-2517C99D7C00} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B175520C-86A2-35A7-8619-86DC379688B9} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD95A8CD-1D9F-35AD-981A-3E7925026EBB} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] -- {050d4fc8-5d48-4b8f-8972-47c82c46020f} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ef6b00ec-13e1-4c25-9064-b2f383cb8412} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 - (.Microsoft Corporation.) [HKLM][64Bits] -- {f65db027-aff3-4070-886a-0d87064aabb1} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {61087a79-ac85-455c-934d-1fa22cc64f36} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5740BD44-B58D-321A-AFC0-6D3D4556DD6C} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CB0836EC-B072-368D-82B2-D3470BF95707} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7DAD0258-515C-3DD4-8964-BD714199E0F7} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 - (.Microsoft Corporation.) [HKLM][64Bits] -- {E30D8B21-D82D-3211-82CC-0F0A5D1495E8} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7e9fae12-5bbf-47fb-b944-09c49e75c061} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual C++ 2017 x64 Additional Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F106B700-BFF8-3065-B305-14D36AD40539} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C77195A4-CEB8-38EE-BDD6-C46CB459EF6E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2757496A-3E74-320A-B007-36120A9F126D} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 - (.Microsoft Corporation.) [HKLM][64Bits] -- {39E15475-23F2-345D-8977-B5DC47A94E26} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Mozilla Firefox 80.0.1 (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 80.0.1 (x64 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService [Unsigned] =>.Mozilla
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3 [Unsigned] =>.Google, Inc.
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Simple Media + Abstraction Pack version 8.1 - (.ask4pc.) [HKLM][64Bits] -- Simple Media + Abstraction Pack_is1 [Unsigned] =>.Ask4pc
O42 - Logiciel: Splitter 7.6.2.9 - (.Iston Software.) [HKLM][64Bits] -- MP3 Splitter_is1 [Unsigned]
O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB4023057) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BAA0A93-3AD3-4B19-9105-4C8C3FA92A83} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB4480730) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0746492E-47B6-4251-940C-44462DFD74BB} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player [Unsigned] =>.VideoLAN
O42 - Logiciel: Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {81ee23d4-143b-40bd-a60e-afb885270f5c} =>PUP.Optional.LavasoftWebCompanion
O42 - Logiciel: WinRAR 5.91 beta 1 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: Wondershare Filmora(Build 8.3.0) - (.Wondershare Software.) [HKLM][64Bits] -- Wondershare Filmora_is1 [Unsigned] =>.Wondershare Software
O42 - Logiciel: Wondershare Helper Compact 2.6.0 - (.Wondershare.) [HKLM][64Bits] -- {5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1 [Unsigned] =>.Wondershare

---\\ CLÉ DE REGISTRE SOFTWARE HKCU & HKLM (110) - 116s
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com =>PUP.Optional.LavasoftWebCompanion
HKCU\Software\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\AMD =>.AMD
HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\Avast Software =>.AVAST Software
HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation
HKLM\SOFTWARE\Dolby =>.Dolby
HKLM\SOFTWARE\DTS =>.Creative Technology
HKLM\SOFTWARE\FormatPlayer
HKLM\SOFTWARE\Fortemedia =>.Lugert Europe
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\IPS =>.EgisTec
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\Knowles =>.Knowles Electronics
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\Minnetonka Audio Software =>.Minnetonka Audio Software
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Nahimic =>.Nahimic
HKLM\SOFTWARE\Nuance =>.Nuance
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM =>.OEM
HKLM\SOFTWARE\OpenSSH =>.OpenBSD
HKLM\SOFTWARE\Partner =>.Google Inc.
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\SonicFocus =>.Sonic Focus
HKLM\SOFTWARE\SoundResearch =>.Sound Research
HKLM\SOFTWARE\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Waves Audio =>.Waves Audio
HKLM\SOFTWARE\Windows =>.Microsoft Corporation
HKLM\SOFTWARE\WinRAR =>.WinRAR
HKLM\SOFTWARE\Wondershare =>.Wondershare
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\Yamaha APO =>.Yamaha Corp.
HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\WOW6432Node\AMD =>.AMD
HKLM\SOFTWARE\WOW6432Node\ATI =>.ATI
HKLM\SOFTWARE\WOW6432Node\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\WOW6432Node\DivXNetworks =>.DivXNetworks
HKLM\SOFTWARE\WOW6432Node\Google =>.Google
HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
HKLM\SOFTWARE\WOW6432Node\Internet Download Manager =>.Tonec Inc
HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\WOW6432Node\Lavasoft =>.Lavasoft
HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\WOW6432Node\VideoLAN =>.VideoLan Team
HKLM\SOFTWARE\WOW6432Node\Wondershare =>.Wondershare
HKLM\SOFTWARE\WOW6432Node\Wow6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\AMD =>.AMD
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\ATI =>.ATI
HKCU\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\BugSplat =>.Bugsplat Game
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\CineForm =>.CineForm
HKCU\SOFTWARE\CocCoc
HKCU\SOFTWARE\DownloadManager =>.DownloadManager
HKCU\SOFTWARE\FreeTime =>.FreeTime Inc
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Lavasoft =>.Lavasoft
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Sysinternals =>.Sysinternals
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKU\.DEFAULT\SOFTWARE\ATI =>.ATI
HKU\.DEFAULT\SOFTWARE\Google =>.Google
HKU\.DEFAULT\SOFTWARE\Mozilla =>.Mozilla
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Adobe =>.Adobe
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\AMD =>.AMD
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\ATI =>.ATI
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\AVAST Software =>.AVAST Software
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\BugSplat =>.Bugsplat Game
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Chromium =>.Chromium
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\CineForm =>.CineForm
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\CocCoc
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\DownloadManager =>.DownloadManager
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\FreeTime =>.FreeTime Inc
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Google =>.Google
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Lavasoft =>.Lavasoft
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Mozilla =>.Mozilla
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Sysinternals =>.Sysinternals
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Trolltech =>.Trolltech
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\WinRAR =>.WinRAR
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\WinRAR SFX =>.RarLab
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Wondershare =>.Wondershare
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\SOFTWARE\ZHP =>.Nicolas Coolman

---\\ PACKAGES (1) - 1s
C:\Program Files (x86)\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0 - (.Spotify.) [][Spotify Music] =>Spotify

---\\ CONTENU DES DOSSIERS PROGRAMMES (172) - 75s
O43 - CFD: 08/09/2020 - [] D -- C:\Program Files\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\AMD =>.Advanced Micro Devices, Inc.®
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 06/09/2020 - [] D -- C:\Program Files\CUAssistant
O43 - CFD: 31/08/2020 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 04/09/2020 - [] D -- C:\Program Files\FormatFactory =>.暇光软件科技（上海）有限公司®
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Program Files\ModifiableWindowsApps =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 09/09/2020 - [] D -- C:\Program Files\rempl =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 12/09/2020 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 08/09/2020 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Windows Defender Advanced Threat Protection =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 02/09/2020 - [] D -- C:\Program Files\Wondershare =>.Wondershare
O43 - CFD: 02/09/2020 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\AMD =>.Advanced Micro Devices, Inc.®
O43 - CFD: 03/09/2020 - [] D -- C:\Program Files (x86)\Aurora3D [Unsigned] =>.Aurora3D
O43 - CFD: 08/09/2020 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files (x86)\Direct WAV MP3 Splitter [Unsigned]
O43 - CFD: 03/09/2020 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files (x86)\Internet Download Manager =>.Tonec Inc
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Lavasoft =>.Lavasoft
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 03/09/2020 - [0] D -- C:\Program Files (x86)\Microvirt =>.Microvirt
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 02/09/2020 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files (x86)\Wondershare.Filmora =>.Wondershare
O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings =>.Samsung Electronics
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aurora 3D Text & Logo Maker
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Direct WAV MP3 Splitter
O43 - CFD: 08/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Filmora
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft =>.Lavasoft
O43 - CFD: 19/03/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 =>.Google Inc.
O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare =>.Wondershare
O43 - CFD: 08/09/2020 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 07/09/2020 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 04/09/2020 - [] D -- C:\ProgramData\Avast Software =>.AVAST Software
O43 - CFD: 31/08/2020 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 04/09/2020 - [0] D -- C:\ProgramData\fgama
O43 - CFD: 01/09/2020 - [0] D -- C:\ProgramData\IDM =>.IDM
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Lavasoft =>.Lavasoft
O43 - CFD: 31/08/2020 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation
O43 - CFD: 02/09/2020 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 11/09/2020 - [] D -- C:\ProgramData\Packages =>.Microsoft Corporation
O43 - CFD: 08/09/2020 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc.
O43 - CFD: 13/09/2020 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [0] D -- C:\ProgramData\ssh
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\ProgramData\WindowsHolographicDevices =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\ProgramData\Wondershare =>.Wondershare
O43 - CFD: 02/09/2020 - [] D -- C:\ProgramData\Wondershare Video Editor =>.Wondershare Inc
O43 - CFD: 04/09/2020 - [0] D -- C:\ProgramData\{B73E8B02-9F16-F37A-C74E-DB522FA6038A}
O43 - CFD: 08/09/2020 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 08/09/2020 - [] D -- C:\Program Files (x86)\Common Files\Pendejo Software =>.Pendejo Software
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Program Files (x86)\Common Files\Wondershare =>.Wondershare
O43 - CFD: 08/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 04/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\AMD =>.AMD
O43 - CFD: 12/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\DMCache =>.DMCache
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\IDM =>.IDM
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Lavasoft =>.Lavasoft
O43 - CFD: 08/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 07/09/2020 - [] SD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\uTorrent
O43 - CFD: 12/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Adobe =>.Adobe
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\AMD =>.AMD
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Magic Pc\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\BitTorrentHelper
O43 - CFD: 02/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\CEF =>.CEF
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\chromium =>.Chromium
O43 - CFD: 31/08/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 03/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Configure
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 04/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 11/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 01/09/2020 - [0] D -- C:\Users\Magic Pc\AppData\Local\DBG =>.DBG
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 04/09/2020 - [0] D -- C:\Users\Magic Pc\AppData\Local\FTMod
O43 - CFD: 03/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Google =>.Google
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Magic Pc\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Lavasoft =>.Lavasoft
O43 - CFD: 03/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Maker3D
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 03/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Microvirt =>.Microvirt
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [0] D -- C:\Users\Magic Pc\AppData\Local\PeerDistRepub =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [0] D -- C:\Users\Magic Pc\AppData\Local\PlaceholderTileLogoFolder =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Magic Pc\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [0] D -- C:\Users\Magic Pc\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\Wondershare =>.Wondershare
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 04/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A} =>PUP.Optional.WinYahoo
O43 - CFD: 01/09/2020 - [0] D -- C:\Users\Magic Pc\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 01/09/2020 - [] D -- C:\Users\Magic Pc\AppData\LocalLow\3098htrhpen8ifg0
O43 - CFD: 04/09/2020 - [] D -- C:\Users\Magic Pc\AppData\LocalLow\Adobe =>.Adobe
O43 - CFD: 03/09/2020 - [] D -- C:\Users\Magic Pc\AppData\LocalLow\AMD =>.AMD
O43 - CFD: 03/09/2020 - [] SD -- C:\Users\Magic Pc\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\LocalLow\Mozilla =>.Mozilla Corporation
O43 - CFD: 13/09/2020 - [] D -- C:\Users\Magic Pc\AppData\LocalLow\uTorrent
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\Desktop\VIP
O43 - CFD: 07/09/2020 - [] RD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] RD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] RD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory =>.FormatFactory
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] RD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] RD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] RD -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\Users\Magic Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 31/08/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 07/09/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (3) - 1s
O106 - SIOI: [ IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll =>.Tonec Inc.®
O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\System32\cscui.dll [Unsigned] =>.Microsoft Corporation

---\\ RACCOURCIS DES MENUS CONTEXTUELS (SCMH) (32) - 9s
O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH1: FormatFactoryShell [64Bits] - {A3888923-CFD3-4A6B-89BF-08E6B95716E8} . (.Free Time - FormatFactory Shell Menu Module.) -- C:\Program Files\FormatFactory\ShellEx_108.dll [Unsigned] =>.Free Time
O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH2: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH4: FormatFactoryShell [64Bits] - {A3888923-CFD3-4A6B-89BF-08E6B95716E8} . (.Free Time - FormatFactory Shell Menu Module.) -- C:\Program Files\FormatFactory\ShellEx_108.dll [Unsigned] =>.Free Time
O108 - CMH4: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: ACE [64Bits] - {5E2121EE-0300-11D4-8D3B-444553540000} . (.Advanced Micro Devices, Inc. - Radeon Settings: Desktop Control Panel.) -- C:\Program Files\AMD\CNext\CNext\atiacm64.dll [Unsigned] =>.Advanced Micro Devices, Inc.
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH6: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll =>.Microsoft®
O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (10) - 2s
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®

---\\ LISTE DES PILOTES DU SYSTÈME (426) - 72s
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\WINDOWS\System32\drivers\1394ohci.sys [264704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107528] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\WINDOWS\System32\drivers\acpi.sys [804664] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\WINDOWS\System32\drivers\AcpiDev.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\WINDOWS\System32\drivers\acpiex.sys [136712] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\WINDOWS\System32\drivers\acpipagr.sys [12800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:38 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\WINDOWS\System32\drivers\acpipmi.sys [16896] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\WINDOWS\System32\drivers\acpitime.sys [13824] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:11:18 A . (.Microsoft Corporation - Audio KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\Acx01000.sys [337920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135632] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:48 A . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\afd.sys [661816] =>.Microsoft®
O58 - SDL:2020/09/07 22:14:27 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\WINDOWS\System32\drivers\afunix.sys [40960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:37 A . (.Microsoft Corporation - Gestionnaire d'appels RAS Agile Vpn Minipor.) -- C:\WINDOWS\System32\drivers\agilevpn.sys [114176] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:19 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\WINDOWS\System32\drivers\ahcache.sys [291840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:33 A . (.Advanced Micro Devices, Inc - AMD GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\amdgpio2.sys [18432] [Unsigned] =>.Advanced Micro Devices, Inc
O58 - SDL:2019/03/19 06:43:33 A . (.Advanced Micro Devices, Inc - AMD I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\amdi2c.sys [37888] [Unsigned] =>.Advanced Micro Devices, Inc
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdk8.sys [199992] =>.Microsoft®
O58 - SDL:2017/06/12 05:07:20 A . (.Advanced Micro Devices, Inc. - amdkmcsp sys.) -- C:\WINDOWS\System32\drivers\amdkmcsp.sys [95080] =>.Advanced Micro Devices Inc.®
O58 - SDL:2017/05/16 18:06:42 A . (.Advanced Micro Devices, Inc. - AMD PCI Root Bus Lower Filter.) -- C:\WINDOWS\System32\drivers\amdkmpfd.sys [97672] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdppm.sys [201528] =>.Microsoft®
O58 - SDL:2017/06/12 05:07:22 A . (.Advanced Micro Devices, Inc. - amdpsp sys.) -- C:\WINDOWS\System32\drivers\amdpsp.sys [239976] =>.Advanced Micro Devices Inc.®
O58 - SDL:2019/03/19 06:43:39 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83464] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259600] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [27176] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:14 A . (.Microsoft Corporation - AppID Driver.) -- C:\WINDOWS\System32\drivers\appid.sys [202552] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:14 A . (.Microsoft Corporation - Applocker Filter.) -- C:\WINDOWS\System32\drivers\applockerfltr.sys [18432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:17:24 A . (.Microsoft Corporation - Microsoft Application Virtualization Stream.) -- C:\WINDOWS\System32\drivers\AppVStrm.sys [138040] =>.Microsoft®
O58 - SDL:2020/09/07 22:17:24 A . (.Microsoft Corporation - Microsoft Application Virtualization VE Man.) -- C:\WINDOWS\System32\drivers\AppvVemgr.sys [174392] =>.Microsoft®
O58 - SDL:2020/09/07 22:17:24 A . (.Microsoft Corporation - Microsoft Application Virtualization VFS Fi.) -- C:\WINDOWS\System32\drivers\AppvVfs.sys [153912] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:39 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [132112] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\System32\drivers\asyncmac.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [30008] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\WINDOWS\System32\drivers\ataport.sys [222520] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:33 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athw8x.sys [4233728] [Unsigned] =>.Qualcomm Atheros Communications, Inc.
O58 - SDL:2017/11/17 07:20:10 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\AtihdWT6.sys [111112] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2019/03/19 06:44:01 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\bam.sys [70456] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\System32\drivers\battc.sys [41784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:34 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] [Unsigned] =>.Broadcom Corporation
O58 - SDL:2019/03/19 06:44:32 A . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\System32\drivers\beep.sys [10240] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:12:43 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\WINDOWS\System32\drivers\bindflt.sys [117264] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:53 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\WINDOWS\System32\drivers\bowser.sys [117248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:38 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\System32\drivers\bridge.sys [127488] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:33 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\WINDOWS\System32\drivers\BtaMPM.sys [36352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2015/07/27 04:04:48 A . (.Qualcomm Atheros - Qualcomm Atheros BtFilter Driver.) -- C:\WINDOWS\System32\drivers\btfilter.sys [618720] =>.Qualcomm Atheros®
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\BthA2dp.sys [231936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Extension de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthenum.sys [114688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:33 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\WINDOWS\System32\drivers\BthHfEnum.sys [131072] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\WINDOWS\System32\drivers\BthMini.SYS [36864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\WINDOWS\System32\drivers\bthmodem.sys [76288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Bluetooth Personal Area Networking.) -- C:\WINDOWS\System32\drivers\bthpan.sys [133120] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthport.sys [1428992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Pilote de Miniport Bluetooth.) -- C:\WINDOWS\System32\drivers\BTHUSB.SYS [99328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - VHD BTT Filter Driver.) -- C:\WINDOWS\System32\drivers\bttflt.sys [42808] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\WINDOWS\System32\drivers\buttonconverter.sys [43008] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:38 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [534032] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:34 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\WINDOWS\System32\drivers\CAD.sys [64312] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:16:11 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\cdfs.sys [100352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\cdrom.sys [173056] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:01 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\WINDOWS\System32\drivers\CEA.sys [82448] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:40 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [142864] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:40 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [319528] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vfx.sys [29696] [Unsigned] =>.Chelsio Communications
O58 - SDL:2019/03/19 06:43:41 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1866768] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\WINDOWS\System32\drivers\circlass.sys [51200] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\System32\drivers\Classpnp.sys [416056] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:24 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\cldflt.sys [457216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:56 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\WINDOWS\System32\drivers\clfs.sys [400696] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:51 A . (.Microsoft Corporation - CLIP Service.) -- C:\WINDOWS\System32\drivers\ClipSp.sys [1029432] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\System32\drivers\CmBatt.sys [36864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - Noyau Gestionnaire de configuration Configu.) -- C:\WINDOWS\System32\drivers\cmimcext.sys [29200] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:44 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\WINDOWS\System32\drivers\cng.sys [752584] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\WINDOWS\System32\drivers\cnghwassist.sys [40760] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:16 A . (.Microsoft Corporation - Console Driver.) -- C:\WINDOWS\System32\drivers\condrv.sys [58896] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:56 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\crashdmp.sys [98104] =>.Microsoft®
O58 - SDL:2020/09/07 22:17:35 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\WINDOWS\System32\drivers\csc.sys [576512] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:00 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\dam.sys [100152] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\WINDOWS\System32\drivers\devauthe.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:38 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\dfsc.sys [151040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\System32\drivers\disk.sys [98104] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:45 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\System32\drivers\Diskdump.sys [37928] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:45 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys [15360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Mémoire dynamique.) -- C:\WINDOWS\System32\drivers\dmvsc.sys [58168] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmk.sys [98304] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmkaud.sys [16344] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:28 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpata.sys [36904] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:18:22 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\WINDOWS\System32\drivers\dumpfve.sys [93104] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:49 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsd.sys [193848] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsdport.sys [32256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:45 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpstorport.sys [34616] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:53 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys [3581240] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:58 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms1.sys [441144] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:58 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms2.sys [874296] =>.Microsoft®
O58 - SDL:2019/03/19 06:45:38 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\WINDOWS\System32\drivers\EhStorClass.sys [85520] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [114696] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Error Device Driver.) -- C:\WINDOWS\System32\drivers\errdev.sys [14336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:38 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3419176] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:11 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\System32\drivers\exfat.sys [404480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:11:11 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\System32\drivers\fastfat.sys [422712] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\System32\drivers\fdc.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\WINDOWS\System32\drivers\filecrypt.sys [59392] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:28 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\WINDOWS\System32\drivers\fileinfo.sys [94520] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:28 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\WINDOWS\System32\drivers\filetrace.sys [40960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\System32\drivers\flpydisk.sys [28160] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\WINDOWS\System32\drivers\fltMgr.sys [437776] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\WINDOWS\System32\drivers\fsdepends.sys [67896] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:35 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\System32\drivers\fs_rec.sys [34320] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:18:22 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\WINDOWS\System32\drivers\fvevol.sys [800568] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:49 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [477496] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:45 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys [8704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [114688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\HdAudio.sys [425472] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\WINDOWS\System32\drivers\hidbatt.sys [39736] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\WINDOWS\System32\drivers\hidbth.sys [121344] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Bibliothèque Hid Class.) -- C:\WINDOWS\System32\drivers\hidclass.sys [211968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidi2c.sys [54784] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\WINDOWS\System32\drivers\hidinterrupt.sys [53560] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidir.sys [48640] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys [46080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidspi.sys [64000] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidusb.sys [45568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64528] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:44 A . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\WINDOWS\System32\drivers\http.sys [1300280] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Hyper-V Crashdump.) -- C:\WINDOWS\System32\drivers\hvcrash.sys [32568] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:16:02 A . (.Microsoft Corporation - Hypervisor Boot Driver.) -- C:\WINDOWS\System32\drivers\hvservice.sys [84280] =>.Microsoft®
O58 - SDL:2019/03/19 06:45:54 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\WINDOWS\System32\drivers\hvsocket.sys [145208] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\WINDOWS\System32\drivers\hwpolicy.sys [33080] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\WINDOWS\System32\drivers\hyperkbd.sys [25400] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\WINDOWS\System32\drivers\HyperVideo.sys [42000] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [119296] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36352] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91136] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [180736] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:34 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:38 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2019/03/19 06:43:37 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [885048] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [411960] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [566800] =>.Microsoft Windows®
O58 - SDL:2018/12/20 13:05:20 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\WINDOWS\System32\drivers\idmwfp.sys [229296] =>.Tonec Inc.®
O58 - SDL:2019/03/19 06:44:16 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys [46592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\System32\drivers\intelide.sys [19984] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\WINDOWS\System32\drivers\intelpep.sys [355000] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:34 A . (.Microsoft Corporation - Intel Power Limit Driver.) -- C:\WINDOWS\System32\drivers\intelpmax.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\intelppm.sys [224056] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:45 A . (.Microsoft Corporation - Filtre de contrôle de taux d’E/S.) -- C:\WINDOWS\System32\drivers\iorate.sys [56632] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\System32\drivers\ipfltdrv.sys [90624] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys [110904] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:16 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\ipnat.sys [224768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - IPT Driver.) -- C:\WINDOWS\System32\drivers\ipt.sys [54584] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\WINDOWS\System32\drivers\isapnp.sys [23352] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [148520] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\WINDOWS\System32\drivers\kbdclass.sys [70968] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\WINDOWS\System32\drivers\kbdhid.sys [46592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\WINDOWS\System32\drivers\kdnic.sys [32568] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:11 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys [30720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:18 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\System32\drivers\ks.sys [455680] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:48 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecdd.sys [146744] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:44 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecpkg.sys [179512] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:52 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\WINDOWS\System32\drivers\ksthunk.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:48 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\WINDOWS\System32\drivers\lltdio.sys [72192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [109064] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [124448] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [128528] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82960] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:14:19 A . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) -- C:\WINDOWS\System32\drivers\luafv.sys [141312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\WINDOWS\System32\drivers\mausbhost.sys [535864] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\WINDOWS\System32\drivers\mausbip.sys [62264] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:11 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\WINDOWS\System32\drivers\MbbCx.sys [359424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:33 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\System32\drivers\mcd.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59920] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [75280] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [94736] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [576016] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:33 A . (.Microsoft Corporation - Pilote de transport Microsoft Bluetooth Avr.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [64512] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [97280] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [1150480] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:47 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\WINDOWS\System32\drivers\mmcss.sys [53760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:53 A . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\WINDOWS\System32\drivers\modem.sys [46592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - Monitor Driver.) -- C:\WINDOWS\System32\drivers\monitor.sys [69632] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\WINDOWS\System32\drivers\mouclass.sys [66872] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\System32\drivers\mouhid.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\WINDOWS\System32\drivers\mountmgr.sys [113160] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:15 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\WINDOWS\System32\drivers\mpsdrv.sys [80384] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:16:47 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\System32\drivers\mrxdav.sys [158208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\mrxsmb.sys [561464] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys [260920] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\System32\drivers\msfs.sys [43536] =>.Microsoft®
O58 - SDL:2020/09/07 22:12:00 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\WINDOWS\System32\drivers\msgpioclx.sys [182288] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\WINDOWS\System32\drivers\msgpiowin32.sys [54072] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:16 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys [8704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\WINDOWS\System32\drivers\mshidumdf.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:16 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\WINDOWS\System32\drivers\mshwnclx.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - ISA Driver.) -- C:\WINDOWS\System32\drivers\msisadrv.sys [19256] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\WINDOWS\System32\drivers\msiscsi.sys [292664] =>.Microsoft®
O58 - SDL:2020/09/07 22:14:18 A . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:00 A . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discov.) -- C:\WINDOWS\System32\drivers\mslldp.sys [78848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:52 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:52 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:48 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\WINDOWS\System32\drivers\msrpc.sys [372752] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:08 A . (.Microsoft Corporation - Pilote du filtre de système de fichiers du.) -- C:\WINDOWS\System32\drivers\mssecflt.sys [275256] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\System32\drivers\mssmbios.sys [48440] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:52 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys [12800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\WINDOWS\System32\drivers\MTConfig.sys [16384] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Pilote de fournisseur UNC multiples.) -- C:\WINDOWS\System32\drivers\mup.sys [129848] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [64016] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [153616] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:48 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\WINDOWS\System32\drivers\ndis.sys [1482568] =>.Microsoft®
O58 - SDL:2019/03/19 06:45:50 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\WINDOWS\System32\drivers\ndiscap.sys [56320] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:27 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys [135168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:37 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\System32\drivers\ndistapi.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:35 A . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\WINDOWS\System32\drivers\ndisuio.sys [70656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:00 A . (.Microsoft Corporation - Énumérateur de cartes réseau virtuelles Mic.) -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [22016] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:37 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\System32\drivers\ndiswan.sys [206336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:50 A . (.Microsoft Corporation - RDMA Sample Driver.) -- C:\WINDOWS\System32\drivers\NDKPing.sys [63488] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:37 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\System32\drivers\ndproxy.sys [244736] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:32 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\WINDOWS\System32\drivers\Ndu.sys [132096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:36 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [187904] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:58 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\System32\drivers\netbios.sys [64824] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:14:27 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netbt.sys [337408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:48 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\WINDOWS\System32\drivers\netio.sys [586768] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Miniport NDIS virtuel.) -- C:\WINDOWS\System32\drivers\netvsc.sys [246072] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\System32\drivers\npfs.sys [87048] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\WINDOWS\System32\drivers\npsvctrig.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:48 A . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\drivers\nsiproxy.sys [48128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:46 A . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2698048] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:53 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\WINDOWS\System32\drivers\ntosext.sys [20496] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:35 A . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\System32\drivers\null.sys [7680] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Pilote de périphérique NVDIMM.) -- C:\WINDOWS\System32\drivers\nvdimm.sys [158520] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150544] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166408] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:27 A . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\WINDOWS\System32\drivers\nwifi.sys [702464] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:15 A . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\WINDOWS\System32\drivers\pacer.sys [160784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\parport.sys [108032] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:47 A . (.Microsoft Corporation - Partition driver.) -- C:\WINDOWS\System32\drivers\partmgr.sys [178192] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\WINDOWS\System32\drivers\pci.sys [437560] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\pciide.sys [16912] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\System32\drivers\pciidex.sys [56632] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:34 A . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\WINDOWS\System32\drivers\pcmcia.sys [127504] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:33 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\WINDOWS\System32\drivers\pcw.sys [58384] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:18 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\WINDOWS\System32\drivers\pdc.sys [180232] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:20 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\WINDOWS\System32\drivers\PEAuth.sys [817152] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58896] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [68624] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:50 A . (.Microsoft Corporation - Pilote du moniteur de paquets.) -- C:\WINDOWS\System32\drivers\PktMon.sys [96056] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Pilote de mémoire persistante.) -- C:\WINDOWS\System32\drivers\pmem.sys [127800] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:38 A . (.Microsoft Corporation - Pilote mémoire Plug and Play.) -- C:\WINDOWS\System32\drivers\pnpmem.sys [17408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - Port Device Class Configuration Filter Driv.) -- C:\WINDOWS\System32\drivers\portcfg.sys [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\System32\drivers\portcls.sys [390656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\processr.sys [208696] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:15 A . (.Microsoft Corporation - Process Launch Monitor driver.) -- C:\WINDOWS\System32\drivers\ProcLaunchMon.sys [36248] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:00 A . (.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) -- C:\WINDOWS\System32\drivers\qwavedrv.sys [53760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\WINDOWS\System32\drivers\ramdisk.sys [41784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\System32\drivers\rasacd.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\rasl2tp.sys [112128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\raspppoe.sys [87552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\System32\drivers\raspptp.sys [103424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\rassstp.sys [85504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\WINDOWS\System32\drivers\rdbss.sys [457016] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\WINDOWS\System32\drivers\rdpbus.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:16:40 A . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [167936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:16:32 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys [32056] =>.Microsoft®
O58 - SDL:2019/03/19 06:45:56 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\WINDOWS\System32\drivers\rdyboost.sys [294928] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:16 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\WINDOWS\System32\drivers\refs.sys [1972536] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:16 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\WINDOWS\System32\drivers\refsv1.sys [986936] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\System32\drivers\rfcomm.sys [211456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Transport d’ordinateur virtuel Microsoft Re.) -- C:\WINDOWS\System32\drivers\RfxVmt.sys [41472] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:38 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\WINDOWS\System32\drivers\rhproxy.sys [113152] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:43 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\System32\drivers\rmcast.sys [159232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\System32\drivers\RNDISMP.sys [37376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:53 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\System32\drivers\rootmdm.sys [13824] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:48 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\System32\drivers\rspndr.sys [89088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2015/06/29 02:14:40 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 64-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [895256] =>.Realtek Semiconductor Corp®
O58 - SDL:2019/03/19 06:43:49 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [57856] [Unsigned] =>.Realtek
O58 - SDL:2015/10/23 10:31:20 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4635392] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/06/24 02:17:22 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\WINDOWS\System32\drivers\RtsPer.sys [761600] =>.Realtek Semiconductor Corp®
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\WINDOWS\System32\drivers\sbp2port.sys [117288] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:30 A . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\WINDOWS\System32\drivers\scfilter.sys [45056] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:47 A . (.Microsoft Corporation - Pilote de bus de mémoire de classe stockage.) -- C:\WINDOWS\System32\drivers\scmbus.sys [151352] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:33 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\System32\drivers\scsiport.sys [187408] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:49 A . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\WINDOWS\System32\drivers\sdbus.sys [297272] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:38 A . (.Microsoft Corporation - SDF Reflector.) -- C:\WINDOWS\System32\drivers\SDFRd.sys [33592] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\WINDOWS\System32\drivers\sdport.sys [105784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\WINDOWS\System32\drivers\sdstor.sys [103736] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\WINDOWS\System32\drivers\SerCx.sys [84792] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\WINDOWS\System32\drivers\SerCx2.sys [170808] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\System32\drivers\serenum.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\WINDOWS\System32\drivers\serial.sys [89600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\WINDOWS\System32\drivers\sermouse.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\System32\drivers\sfloppy.sys [18944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:45:32 A . (.Microsoft Corporation - System Guard Runtime Monitor Agent Driver.) -- C:\WINDOWS\System32\drivers\SgrmAgent.sys [89096] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [45072] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81936] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:36 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\WINDOWS\System32\drivers\SleepStudyHelper.sys [38200] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:39 A . (.Microsemi Corportation - Storport Miniport Driver for SmartRAID/Smar.) -- C:\WINDOWS\System32\drivers\SmartSAMD.sys [220176] =>.Microsoft Windows®
O58 - SDL:2019/03/19 14:03:51 A . (.Microsoft Corporation - Pilote réseau SMB Direct.) -- C:\WINDOWS\System32\drivers\smbdirect.sys [171008] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:30 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\WINDOWS\System32\drivers\smclib.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\WINDOWS\System32\drivers\spacedump.sys [204608] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\WINDOWS\System32\drivers\spaceport.sys [656696] =>.Microsoft®
O58 - SDL:2019/03/19 14:03:48 A . (.Microsoft Corporation - Holographic Spatial Graph Filter.) -- C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [76088] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\WINDOWS\System32\drivers\SpbCx.sys [85816] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\WINDOWS\System32\drivers\srv2.sys [772096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Server Network driver.) -- C:\WINDOWS\System32\drivers\srvnet.sys [309248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31240] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storahci.sys [174392] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:47 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\WINDOWS\System32\drivers\stornvme.sys [141840] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:18 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\WINDOWS\System32\drivers\storport.sys [637480] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - Filtre de qualité de service de stockage.) -- C:\WINDOWS\System32\drivers\storqosflt.sys [93200] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:47 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storufs.sys [59192] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:51 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\WINDOWS\System32\drivers\storvsc.sys [43536] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:33 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys [82432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2015/08/20 19:34:58 A . (.Synaptics Incorporated - Synaptics I2C Driver.) -- C:\WINDOWS\System32\drivers\SynRMIHID.sys [61624] =>.Synaptics Incorporated®
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - VSC vidéo Synth3D RemoteFX Microsoft.) -- C:\WINDOWS\System32\drivers\Synth3dVsc.sys [66560] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:33 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\System32\drivers\tape.sys [33280] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:11:23 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\WINDOWS\System32\drivers\tbs.sys [29712] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:49 A . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\WINDOWS\System32\drivers\tcpip.sys [2986808] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:58 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\WINDOWS\System32\drivers\tcpipreg.sys [54784] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:36 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\System32\drivers\tdi.sys [39440] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:32 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [132616] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\WINDOWS\System32\drivers\terminpt.sys [41488] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:56 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\WINDOWS\System32\drivers\tm.sys [141840] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:49 A . (.Microsoft Corporation - Pilote de périphérique TPM.) -- C:\WINDOWS\System32\drivers\tpm.sys [250696] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\WINDOWS\System32\drivers\TsUsbFlt.sys [65024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:51 A . (.Microsoft Corporation - Concentrateur USB du Bureau à distance.) -- C:\WINDOWS\System32\drivers\tsusbhub.sys [132096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:27 A . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\WINDOWS\System32\drivers\tunnel.sys [128512] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\WINDOWS\System32\drivers\uaspstor.sys [79376] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmCx.sys [160256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys [186368] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmUcsiCx.sys [111104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\WINDOWS\System32\drivers\Ucx01000.sys [244024] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:49 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\WINDOWS\System32\drivers\Udecx.sys [51200] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:16:43 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\System32\drivers\udfs.sys [342528] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 14:03:49 A . (.Microsoft Corporation - Microsoft User Experience Virtualization Ag.) -- C:\WINDOWS\System32\drivers\UevAgentDriver.sys [41272] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\WINDOWS\System32\drivers\ufx01000.sys [311096] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\WINDOWS\System32\drivers\ufxsynopsys.sys [181048] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\WINDOWS\System32\drivers\umpass.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\WINDOWS\System32\drivers\urscx01000.sys [74552] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:45:02 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\System32\drivers\usb8023.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys [198656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - Microsoft USB Audio Class 2.0 Driver.) -- C:\WINDOWS\System32\drivers\usbaudio2.sys [257536] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:38 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys [39936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:49 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\System32\drivers\usbccgp.sys [183608] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\WINDOWS\System32\drivers\usbcir.sys [107008] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys [33592] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbehci.sys [100664] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de concentrateur USB par défaut.) -- C:\WINDOWS\System32\drivers\usbhub.sys [545592] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:49 A . (.Microsoft Corporation - Pilote de concentrateur USB3.) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS [634680] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbohci.sys [30208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:12:51 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [53248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\WINDOWS\System32\drivers\usbport.sys [475144] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:37 A . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\System32\drivers\usbprint.sys [34304] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\WINDOWS\System32\drivers\usbser.sys [79360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [134968] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbuhci.sys [39936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:44 A . (.Microsoft Corporation - USB Video Class Driver.) -- C:\WINDOWS\System32\drivers\usbvideo.sys [306496] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:49 A . (.Microsoft Corporation - Pilote XHCI USB.) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS [531768] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\WINDOWS\System32\drivers\vdrvroot.sys [60216] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:35 A . (.Microsoft Corporation - Extension du vérificateur de pilotes.) -- C:\WINDOWS\System32\drivers\VerifierExt.sys [321040] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:48 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\WINDOWS\System32\drivers\vhdmp.sys [804872] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\WINDOWS\System32\drivers\vhf.sys [39936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:50 A . (.Microsoft Corporation - Microsoft Hyper-V Virtualization Infrastruc.) -- C:\WINDOWS\System32\drivers\Vid.sys [551736] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:38 A . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\System32\drivers\videoprt.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:16:45 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys [100664] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:51 A . (.Microsoft Corporation - Pilote enfant de bus VMBus sous Microsoft H.) -- C:\WINDOWS\System32\drivers\vmbus.sys [151568] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\WINDOWS\System32\drivers\VMBusHID.sys [36152] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\WINDOWS\System32\drivers\vmgencounter.sys [22328] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\WINDOWS\System32\drivers\vmgid.sys [18232] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\WINDOWS\System32\drivers\vms3cap.sys [17208] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:10:51 A . (.Microsoft Corporation - Pilote de filtre de stockage virtuel.) -- C:\WINDOWS\System32\drivers\vmstorfl.sys [52752] =>.Microsoft®
O58 - SDL:2020/09/07 22:10:45 A . (.Microsoft Corporation - Pilote du gestionnaire de volumes.) -- C:\WINDOWS\System32\drivers\volmgr.sys [89912] =>.Microsoft®
O58 - SDL:2019/03/19 06:45:38 A . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\WINDOWS\System32\drivers\volmgrx.sys [388112] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:32 A . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [429880] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - Volume driver.) -- C:\WINDOWS\System32\drivers\volume.sys [16696] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:44 A . (.Microsoft Corporation - Virtual PCI Bus.) -- C:\WINDOWS\System32\drivers\vpci.sys [83768] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:40 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166928] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:40 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305672] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:55 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\WINDOWS\System32\drivers\vwifibus.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:55 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\WINDOWS\System32\drivers\vwififlt.sys [77312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:55 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\vwifimp.sys [50176] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:39 A . (.Microsoft Corporation - Pilote de tablette Wacom à stylet série.) -- C:\WINDOWS\System32\drivers\wacompen.sys [31744] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:14:37 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\System32\drivers\wanarp.sys [92672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:06 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\System32\drivers\watchdog.sys [66048] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:12:49 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\WINDOWS\System32\drivers\wcifs.sys [201744] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:16 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\WINDOWS\System32\drivers\wcnfs.sys [92672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:57 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\WINDOWS\System32\drivers\WdBoot.sys [46472] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:47 A . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\WINDOWS\System32\drivers\Wdf01000.sys [847168] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:57 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\WINDOWS\System32\drivers\WdFilter.sys [333784] =>.Microsoft®
O58 - SDL:2020/09/07 22:13:47 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\WINDOWS\System32\drivers\WdfLdr.sys [58696] =>.Microsoft®
O58 - SDL:2020/09/07 22:11:27 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys [931840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:21 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [21816] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:57 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys [62432] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:35 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\WINDOWS\System32\drivers\werkernel.sys [50488] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:12:39 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\WINDOWS\System32\drivers\wfplwfs.sys [180536] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:24 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\WINDOWS\System32\drivers\wimmount.sys [37392] =>.Microsoft®
O58 - SDL:2019/03/19 06:44:18 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [75752] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [17896] =>.Microsoft®
O58 - SDL:2019/03/19 06:45:54 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\WINDOWS\System32\drivers\winhv.sys [32568] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:16:03 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) -- C:\WINDOWS\System32\drivers\winhvr.sys [84488] =>.Microsoft®
O58 - SDL:2019/03/19 06:43:41 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [37928] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:11:18 A . (.Microsoft Corporation - Pilote NAT Windows.) -- C:\WINDOWS\System32\drivers\winnat.sys [251392] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:13:41 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\WINDOWS\System32\drivers\winquic.sys [205112] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:43 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\WINDOWS\System32\drivers\winusb.sys [105472] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:41 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [77832] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:43:41 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\WINDOWS\System32\drivers\wmiacpi.sys [19456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:36 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\System32\drivers\wmilib.sys [20496] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:24 A . (.Microsoft Corporation - Filtre de superposition Windows.) -- C:\WINDOWS\System32\drivers\wof.sys [225080] =>.Microsoft®
O58 - SDL:2019/03/19 14:03:51 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys [31248] =>.Microsoft Windows®
O58 - SDL:2019/03/19 06:44:36 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\WINDOWS\System32\drivers\WppRecorder.sys [39976] =>.Microsoft Windows®
O58 - SDL:2020/09/07 22:13:57 A . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys [25088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:53 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFPf.sys [134656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:53 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFRd.sys [297984] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:10:41 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\WINDOWS\System32\drivers\xboxgip.sys [324608] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:43:33 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\WINDOWS\System32\drivers\xinputhid.sys [48128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:12:42 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\WINDOWS\System32\win32k.sys [550400] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:11:59 A . (.Microsoft Corporation - Pilote du noyau Base Win32k.) -- C:\WINDOWS\System32\win32kbase.sys [2717696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:12:42 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kfull.sys [3727872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 06:44:15 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\WINDOWS\System32\win32kns.sys [30208] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:15:29 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\WINDOWS\SysWOW64\win32k.sys [324096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/07 22:15:29 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\SysWOW64\win32kfull.sys [2799104] [Unsigned] =>.Microsoft Corporation

---\\ DERNIERS FICHIERS MODIFIÉS OU CRÉÉS (Utilisateur) (6) - 166s
O61 - LFC: 2020/09/01 15:36:49 AH . (..) -- C:\ProgramData\EASDGH.exe [1344512] [Unsigned]
O61 - LFC: 2020/09/04 20:32:42 A . (..) -- C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\uninst.exe [37526] [Unsigned] =>PUP.Optional.WinYahoo
O61 - LFC: 2020/09/07 13:59:16 A . (.BitTorrent Inc..) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\helper\helper.exe [4740328] =>BitTorrent (P2P)
O61 - LFC: 2020/09/07 13:58:10 A . (.BitTorrent Inc..) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\updates\3.5.5_45798.exe [2117080] =>BitTorrent (P2P)
O61 - LFC: 2020/09/07 13:59:03 A . (.BitTorrent Inc..) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\updates\3.5.5_45798\utorrentie.exe [427736] =>BitTorrent (P2P)
O61 - LFC: 2020/09/07 13:58:10 A . (.BitTorrent Inc..) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe [2117080] =>BitTorrent (P2P)

---\\ ASSOCIATION Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (8) - 1s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\WINDOWS\System32\ie4ushowIE.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\WINDOWS\System32\ie4ushowIE.exe =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR NAVIGATEURS (2) - 23s
O69 - SBI: SearchScopes [HKCU] [64Bits]{993F5746-4C15-42BC-99C1-064A1764271B} - (DefaultSearchYahoo) - http://securesearch.org?
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ ÉNUMÈRE LES SERVICES DÉMARRÉS PAR Svchost (50) - 13s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [192512] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [192512] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [280064] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1261568] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [1042944] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [832000] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [31232] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [151040] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [110080] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [858112] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [233472] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [490496] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [483328] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [124928] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [269824] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [2471936] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll [394752] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll [340992] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [239104] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1263616] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [931840] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [67072] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - DLL du Service de gestion de Windows.) -- C:\Windows\System32\Windows.Management.Service.dll [922624] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll [1500160] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [47104] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [104448] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [914432] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [500224] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [73728] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [629760] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [309248] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3109376] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1583104] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [252928] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [58368] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll [893952] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [336896] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll [255488] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1268224] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) -- C:\Windows\System32\usosvc.dll [544256] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1284608] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [265728] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [2157056] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [72704] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [170496] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [182272] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1063936] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll [831488] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [198656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [526336] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES EXCEPTIONS PAREFEU WINDOWS (17) - 8s
O87 - FAEL: "{F7A81433-8C1B-4A85-BBDB-A4EE6AFD65E7}" [Out-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O87 - FAEL: "{B876838D-3175-4C2A-B057-0288F68092BA}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O87 - FAEL: "{243C1931-F066-40A2-BC77-335BEECC0536}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O87 - FAEL: "{B8AD62C4-C29F-4A4C-AA15-018BB8317816}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O87 - FAEL: "{B4A552DD-BF45-4121-B33C-9463D3D898BA}" [Out-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O87 - FAEL: "{0DE24D4F-B4AF-4EFD-A186-6EE24F0B498D}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
O87 - FAEL: "{AC04BF00-15EF-4434-ABBE-897910DDB8DC}" [In-None-P6-TRUE] .(.Free Time Co., Ltd. - FormatFactory.) -- C:\Program Files\FormatFactory\FormatFactory.exe =>.暇光软件科技（上海）有限公司®
O87 - FAEL: "{F0AD47D1-72A1-4588-875C-B37DB7008B19}" [Out-None-P17-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{548551D7-1471-4B11-B888-0C42B2E0D8A5}" [Out-None-P6-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{2154EBEA-91CA-4E70-A3C5-856D534C5980}" [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{652EA67B-F855-413A-87EA-F0546179C7DB}" [In-None-P17-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{FB168909-A6DA-48F0-9E05-CF6534B5E70F}" [In-None-P17-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{1FECBAE3-D216-4DF3-8554-D148058051FB}" [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{09E38159-20A3-40A7-9639-B6D2FA8B916B}" [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{E6EDFDCD-6DD6-4788-A724-D880BF24525C}" [In-None-P6-TRUE] .(.Spotify Ltd - Spotify.) -- C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB®
O87 - FAEL: "{2BD30943-AB00-4F8A-B305-01571385DF8A}" [In-None-P17-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "{D5DFFC22-F204-42B6-AC89-18AC80714495}" [In-None-P6-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ CODES PRODUITS LOGICIELS (44) - 5s
O90 - PUC: "005CDE630C4EC1738956805440511C9E" [HKLM] . (.Catalyst Control Center Next Localization CS.) -- C:\Windows\Installer\{36EDC500-E4C0-371C-9865-08450415C1E9}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "007B601F8FFB56033B50413DA64D5093" [HKLM] . (.Microsoft Visual C++ 2017 x64 Additional Runtime - 14.15.26706.) =>.Microsoft Corporation
O90 - PUC: "1007C6B46D7C017319E3B52CF3EC196E" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148.) =>.bl.org
O90 - PUC: "10864D02B741DA03C7A5CA54067A0969" [HKLM] . (.Catalyst Control Center Next Localization FI.) -- C:\Windows\Installer\{20D46801-147B-30AD-7C5A-AC4560A79096}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "11793C227472462D13A95105EBAEEA6C" [HKLM] . (.Catalyst Control Center Next Localization FR.) -- C:\Windows\Installer\{22C39711-2747-D264-319A-1550BEEAAEC6}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "12B8D03ED28D112328CCF0A0D541598E" [HKLM] . (.Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660.) =>.Microsoft Corporation
O90 - PUC: "1926E8D15D0BCE53481466615F760A7F" [HKLM] . (.Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "1D5E3C0FEDA1E123187686FED06E995A" [HKLM] . (.Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "1F44C6BE87F001EFCB3609AB05BAC09E" [HKLM] . (.Catalyst Control Center Next Localization CHS.) -- C:\Windows\Installer\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "20A1AA7EC5756C41BFFEB46E4DA6B547" [HKLM] . (.Catalyst Control Center Next Localization BR.) -- C:\Windows\Installer\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "331A6B5086E2007159A0B1D8588BCA8B" [HKLM] . (.AMD Settings.) -- C:\WINDOWS\Installer\{05B6A133-2E68-1700-950A-1B8D85B8ACB8}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "39A0AAB03DA391B41950C4C8F39AA238" [HKLM] . (.Update for Windows 10 for x64-based Systems (KB4023057).) =>.Microsoft Corporation
O90 - PUC: "3A81247D305CFE75CAF9220280E2A7ED" [HKLM] . (.Catalyst Control Center Next Localization DE.) -- C:\Windows\Installer\{D74218A3-C503-57EF-AC9F-2220082E7ADE}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "44DB0475D85BA123FA0CD6D35465DDC6" [HKLM] . (.Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660.) =>.Microsoft Corporation
O90 - PUC: "4A59177C8BECEE83DB6D4CC64B95FEE6" [HKLM] . (.Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.15.26706.) =>.Microsoft Corporation
O90 - PUC: "57451E932F32D54398775BCD749AE462" [HKLM] . (.Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706.) =>.Microsoft Corporation
O90 - PUC: "577A57DE7A30412F68D8947784079786" [HKLM] . (.Catalyst Control Center Next Localization JA.) -- C:\Windows\Installer\{ED75A775-03A7-F214-868D-497748707968}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "7045D1D496B9224626C958812A06404A" [HKLM] . (.Catalyst Control Center Next Localization RU.) -- C:\Windows\Installer\{4D1D5407-9B69-6422-629C-8518A26004A4}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "7C9F8B73BF303523781852719CD9C700" [HKLM] . (.Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "84b9c17023c712640acaf308593282f8" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable (x64).) =>.bl.org
O90 - PUC: "8520DAD7C5154DD39846DB1714990E7F" [HKLM] . (.Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660.) =>.Microsoft Corporation
O90 - PUC: "8B57D62B7BAFB8F667F7AB9F5783D319" [HKLM] . (.Catalyst Control Center Next Localization CHT.) -- C:\Windows\Installer\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "8DFDDD3824DA9F274E1F4565DF3B409C" [HKLM] . (.Catalyst Control Center Next Localization TR.) -- C:\Windows\Installer\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "A694757247E3A0230B706321A0F921D6" [HKLM] . (.Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706.) =>.Microsoft Corporation
O90 - PUC: "A716FD4232DCA6E621B63236D07218EC" [HKLM] . (.Catalyst Control Center Next Localization TH.) -- C:\Windows\Installer\{24DF617A-CD23-6E6A-126B-23630D2781CE}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "b25099274a207264182f8181add555d0" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org
O90 - PUC: "B521F949CC6AE5A5EE7EA45C30501CAF" [HKLM] . (.Catalyst Control Center Next Localization ES.) -- C:\Windows\Installer\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "BAB9738A9A953A0CB8CC8425AE046329" [HKLM] . (.Catalyst Control Center Next Localization SV.) -- C:\Windows\Installer\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "BDFCABD134E5288763DB3525D643DB22" [HKLM] . (.Catalyst Control Center Next Localization HU.) -- C:\Windows\Installer\{1DBACFDB-5E43-7882-36BD-53526D34BD22}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "C025571B2A687A53689168CD7369889B" [HKLM] . (.Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "C3AEB2FCAE628F23AAB933F1E743AB79" [HKLM] . (.Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "C5DBFB7036F28286B1164BA14411F3B3" [HKLM] . (.Catalyst Control Center Next Localization KO.) -- C:\Windows\Installer\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "CAD9DAFD8674BB8CE4E0259306A5B9AE" [HKLM] . (.Catalyst Control Center Next Localization NO.) -- C:\Windows\Installer\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "CE6380BC270BD863282B3D74B09F7570" [HKLM] . (.Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660.) =>.Microsoft Corporation
O90 - PUC: "D20352A90C039D93DBF6126ECE614057" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17.) =>.bl.org
O90 - PUC: "DC8A59DBF9D1DA5389A1E3975220E6BB" [HKLM] . (.Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "DF7BF2C4DF98C5AB85A583113F62DA43" [HKLM] . (.Catalyst Control Center Next Localization DA.) -- C:\Windows\Installer\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "E29464706B74152449C04464D2DF47BB" [HKLM] . (.Update for Windows 10 for x64-based Systems (KB4480730).) =>.Microsoft Corporation
O90 - PUC: "E3D8306E78D57FD8D650EB57233C7EE3" [HKLM] . (.Catalyst Control Center Next Localization NL.) -- C:\Windows\Installer\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "ECB6C50C53E55889116BA447A341B2F7" [HKLM] . (.AMD Settings.) -- C:\WINDOWS\Installer\{C05C6BCE-5E35-9885-11B6-4A743A142B7F}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "EFEE0228DC83E77358593193D847A0EC" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17.) =>.bl.org
O90 - PUC: "F1DBFBFF061B911AC7345848AFE26556" [HKLM] . (.Catalyst Control Center Next Localization PL.) -- C:\Windows\Installer\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "FB4CF19ACE1CACDA971D4F0F76F1D106" [HKLM] . (.Catalyst Control Center Next Localization IT.) -- C:\Windows\Installer\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc
O90 - PUC: "FCF334AD1A095A91567ADF8FD24E28D6" [HKLM] . (.Catalyst Control Center Next Localization EL.) -- C:\Windows\Installer\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}\ARPPRODUCTICON.exe =>.Advanced Micro Devices Inc

---\\ PACKAGES WINDOWS INSTALLER (23) - 18s
[MD5.171127F529928B93BD03ACA5AEFEE2F2] [WIS][2017/04/25 03:44:14] (.Advanced Micro Devices, Inc. - AMD Settings.) -- C:\WINDOWS\Installer\4c18f.msi [32960000] =>.Advanced Micro Devices, Inc.
[MD5.763D11C5BE6C932DB030E822E4DDDD55] [WIS][2017/04/25 03:48:28] (.Advanced Micro Devices, Inc. - AMD Settings.) -- C:\WINDOWS\Installer\4c195.msi [38120448] =>.Advanced Micro Devices, Inc.
[MD5.914E1A27419636DB7C200650598A264A] [WIS][2017/04/25 03:42:18] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89125.msi [546304] =>.Advanced Micro Devices, Inc.
[MD5.9B23325B56492C50256F7C00CF36AE22] [WIS][2017/04/25 03:42:46] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8912a.msi [515584] =>.Advanced Micro Devices, Inc.
[MD5.E1F82EAA2FCE4B9C228B0FC090FEFD17] [WIS][2017/04/25 03:43:16] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8912f.msi [595968] =>.Advanced Micro Devices, Inc.
[MD5.482E81F3A8293A6796673AACF1631ACF] [WIS][2017/04/25 03:43:44] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89134.msi [518656] =>.Advanced Micro Devices, Inc.
[MD5.BF893140CBE1E6844ED6078EE42ECB20] [WIS][2017/04/25 03:44:14] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89139.msi [516608] =>.Advanced Micro Devices, Inc.
[MD5.94FB677C5B7E921AB23D3874C489DAA4] [WIS][2017/04/25 03:44:42] (.Advanced Micro Devices, Inc. - Catalyst Control Center next.) -- C:\WINDOWS\Installer\8913e.msi [594432] =>.Advanced Micro Devices, Inc.
[MD5.F9F06A1D70C1DD2498EBE3ED60FE7D0B] [WIS][2017/04/25 03:45:10] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89143.msi [596480] =>.Advanced Micro Devices, Inc.
[MD5.662ADD92BCF82FA8553EB38192FE922A] [WIS][2017/04/25 03:45:38] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89148.msi [516608] =>.Advanced Micro Devices, Inc.
[MD5.2FCCFBDC3C18BD3A8338206E1967D7E6] [WIS][2017/04/25 03:46:06] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8914d.msi [594944] =>.Advanced Micro Devices, Inc.
[MD5.45DBDE2F8A19886430E586F0A35DAE62] [WIS][2017/04/25 03:46:36] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89152.msi [593408] =>.Advanced Micro Devices, Inc.
[MD5.D0FD7902830AAE7A60D5E01C2106E6C3] [WIS][2017/04/25 03:47:04] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89157.msi [593408] =>.Advanced Micro Devices, Inc.
[MD5.E23011AD90A899A06AC77A4BA73F66A0] [WIS][2017/04/25 03:47:34] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8915c.msi [595456] =>.Advanced Micro Devices, Inc.
[MD5.749030DF93CF4261A4F8EFF54F470380] [WIS][2017/04/25 03:48:04] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89161.msi [594432] =>.Advanced Micro Devices, Inc.
[MD5.E1ED3498D6217DB72A262C03C58DBFC0] [WIS][2017/04/25 03:48:32] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89166.msi [595968] =>.Advanced Micro Devices, Inc.
[MD5.B48A4442385FC6BF129C1A4981BD6A6B] [WIS][2017/04/25 03:49:02] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8916b.msi [516096] =>.Advanced Micro Devices, Inc.
[MD5.1DD2BD8849D29DE5473D1C6276FB1E5D] [WIS][2017/04/25 03:49:30] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89170.msi [517120] =>.Advanced Micro Devices, Inc.
[MD5.E0F646D245A1CAEC0CC78B6918B52930] [WIS][2017/04/25 03:50:00] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89175.msi [594432] =>.Advanced Micro Devices, Inc.
[MD5.618F96F36084D3D803DA03122B3FBC0F] [WIS][2017/04/25 03:50:32] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8917a.msi [595456] =>.Advanced Micro Devices, Inc.
[MD5.EB3405B20E55293173454371B3707895] [WIS][2017/04/25 03:51:02] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\8917f.msi [594944] =>.Advanced Micro Devices, Inc.
[MD5.B9AE525BD51A20CFC67FC62BB282EDA7] [WIS][2017/04/25 03:51:30] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89184.msi [592384] =>.Advanced Micro Devices, Inc.
[MD5.03B59CAC4418C5A593B2F20DAEB4873D] [WIS][2017/04/25 03:51:58] (.Advanced Micro Devices, Inc. - Catalyst Control Center Next.) -- C:\WINDOWS\Installer\89189.msi [592384] =>.Advanced Micro Devices, Inc.

---\\ FEATURE CONTROL. (127) - 0s
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate

---\\ OBSERVATEURS des évènements (111) - 74s

Application.Error: Software Protection Platform Service (33)
~Numéro: 1112
~Date: 09/13/2020 11:21:26 AM
~ID: 8198
~Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant : hr=0xC004F074 Arguments de la ligne de commande : RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de
~Suggestion: Aucune

Application.Error: SideBySide (14)
~Numéro: 1105
~Date: 09/13/2020 11:21:00 AM
~ID: 33
~Description: La création du contexte d’activation a échoué pour « %11 ». Assembly dépendant %1 introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.
~Suggestion: Ces erreurs peuvent généralement être ignorées

Application.Error: Firefox Default Browser Agent (8)
~Numéro: 788
~Date: 09/11/2020 06:40:43 PM
~ID: 12007
~Description: 0x80072EE7 in IsAgentRemoteDisabledInternal:68

Application.Error: Microsoft-Windows-CAPI2 (7)
~Numéro: 775
~Date: 09/11/2020 05:43:15 PM
~ID: 513
~Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.%1.

Application.Error: Application Hang (1)
~Numéro: 774
~Date: 09/11/2020 05:01:15 PM
~ID: 1002
~Description: Le programme %1 version %2 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintenance. ID de proces
~Suggestion: Essayer les commandes suivantes ipconfig /release et ipconfig / renew.

Application.Warning: ESENT (2)
~Numéro: 761
~Date: 09/11/2020 05:03:15 PM
~ID: 472
~Description: %1 (%2) %3Page d’en-tête de sauvegarde du fichier %4 endommagée. La page d’en-tête primaire (%5 octets) a été utilisée à la place.
~Suggestion: 1)Fermer le processus explorer.exe. 2)lancer la commande 'del/f/s/q/a C:\Users\\AppData\Local\Microsoft\Windows\WebCacheLock.dat'. 3) Redémarrer le processus explorer.exe

Application.Error: Application Error (3)
~Numéro: 486
~Date: 09/08/2020 02:41:27 PM
~ID: 1000
~Description: Nom de l’application défaillante %1, version : %2, horodatage : 0x5b92348b Nom du module défaillant : %4, version : %5, horodatage : 0x5b92348b Code d’exception : 0xc000041d Décalage d’erreur : 0x00021515 ID du processus défaillant : 0xec Heure de dé
~Suggestion: Réparer ou réinstaller l'application.

Application.Warning: Wlclntfy (2)
~Numéro: 418
~Date: 09/08/2020 11:15:47 AM
~ID: 6006
~Description: Le traitement de l’événement de notification (%3) par l’abonné aux notifications Winlogon <%1> a duré %2 secondes.
~Suggestion: Supprimer la valeur de registre GpNetworkStartTimeoutPolicyValue de la clé HKLM\SOFTWARE\Policies\Microsoft\Windows\System

Application.Warning: Microsoft-Windows-WMI (42)
~Numéro: 246
~Date: 09/07/2020 10:05:59 PM
~ID: 63
~Description: Un fournisseur, %1, a été inscrit dans l’espace de noms Windows Management Instrumentation %2, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s’il ne représente pas
~Suggestion: Généralement LocalSystem n'est pas nécessaire et le contexte de sécurité NetworkServiceHost est plus approprié.

Application.Warning: Microsoft-Windows-User Profiles Service (1)
~Numéro: 186
~Date: 09/07/2020 09:54:39 PM
~ID: 1534
~Description: Échec de la notification du profil de l’événement %1 pour le composant %2. Le code d’erreur est %3.
~Suggestion: https://www.ghacks.net/2018/12/29/windows-10-user-profile-service-event-id-1534-warnings/

Application.Error: System Restore (2)
~Numéro: 48
~Date: 09/07/2020 09:52:31 PM
~ID: 8193
~Description: Échec de la création d’un point de restauration (Processus = %1 ; Description = %2 ; Erreur = %3).

Application.Error: VSS (6)
~Numéro: 47
~Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine %1. hr = %2. Opération : Instanciation du serveur VSS en cours
~Suggestion: Utiliser la procédure de reconstruction du VSS

System.Warning: DCOM (109)
~Numéro: 1096
~Date: 09/13/2020 12:55:24 PM
~ID: 10016
~Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}DESKTOP-E1095U5Magic PcS-1-5-21-2676131251-1132033558-194381028-1001LocalHost (avec LRPC)Microsoft.Windows.ShellExperienceHost_10.0.1
~Suggestion: Vérifier les autorisations pour l'accès DCOM

System.Warning: BTHUSB (30)
~Numéro: 1058
~Date: 09/13/2020 11:19:32 AM
~ID: 34
~Description: La carte locale ne prend pas en charge un état de contrôleur Low Energy important pour la prise en charge du mode périphérique. Le masque d’état pris en charge requis au minimum est %2, a reçu %3. La fonctionnalité du rôle périphérique Low Energy n

System.Error: EventLog (6)
~Numéro: 1029
~Date: 09/13/2020 11:19:55 AM
~ID: 6008
~Description: L’arrêt système précédant à %1 le %2 n’était pas prévu.

System.Warning: Microsoft-Windows-DNS-Client (6)
~Numéro: 1026
~Date: 09/13/2020 10:46:01 AM
~ID: 1014
~Description: La résolution du nom %1 a expiré lorsqu’aucun des serveurs DNS configurés n’a répondu.
~Suggestion: https://social.technet.microsoft.com/wiki/contents/articles/3336.event-id-1014-microsoft-windows-dns-client.aspx

System.Warning: disk (2)
~Numéro: 538
~Date: 09/08/2020 02:44:17 PM
~ID: 158
~Description: Les identificateurs du disque %2 sont identiques à ceux d'au moins un autre disque du système. Accédez au site web d'assistance Microsoft (http://support.microsoft.com) et consultez la référence KB2983588 pour résoudre le problème.
~Suggestion: https://support.microsoft.com/en-hk/help/2983588/event-id-158-is-logged-for-identical-disk-guids

System.Warning: Microsoft-Windows-NDIS (1)
~Numéro: 450
~Date: 09/08/2020 06:00:32 AM
~ID: 10400
~Description: La réinitialisation de l'interface réseau « %4 » a commencé. Le temps de la réinitialisation du matériel, la connectivité réseau sera momentanément interrompue. Motif : %5. Cette interface réseau a été réinitialisé %6 fois depuis sa dernière initiali
~Suggestion: Vérifier la connexion à l'interface réseau

System.Error: Service Control Manager (7)
~Numéro: 160
~Date: 09/07/2020 09:56:50 PM
~ID: 7023
~Description: Le service %1 s’est arrêté avec l’erreur : %%21

System.Warning: Microsoft-Windows-Kernel-PnP (49)
~Numéro: 122
~Date: 09/07/2020 09:52:42 PM
~ID: 225
~Description: L’application %3 avec l’ID de processus %1 a arrêté le retrait ou l’éjection pour le périphérique %5.

---\\ SCAN ADDITIONNEL (40) - 23s
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A} =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\cetotafet =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\dadoso =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\uninst.exe =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\uninstp.dat =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\chromium-min.jpg =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\control panel-min-min.JPG =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\down.png =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\ff menu.JPG =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\ff search engine-min.png =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\HowToRemove.html =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\hp-min ff.png =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\hp-min ie.png =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\search engine.gif =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\setup pages.gif =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\sp-min.png =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\start-min.jpg =>PUP.Optional.WinYahoo
C:\Users\Magic Pc\AppData\Local\{B11E8742-95B6-EBFA-F82E-CE12DC46328A}\HowToRemove\up.png =>PUP.Optional.WinYahoo
HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService =>PUP.Optional.LavasoftWebCompanion
C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe =>PUP.Optional.LavasoftWebCompanion
C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe =>PUP.Optional.LavasoftWebCompanion
C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{81ee23d4-143b-40bd-a60e-afb885270f5c} =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{81ee23d4-143b-40bd-a60e-afb885270f5c} =>PUP.Optional.LavasoftWebCompanion
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKU\S-1-5-21-2676131251-1132033558-194381028-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com =>PUP.Optional.LavasoftWebCompanion
HKCU\Software\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
C:\Program Files (x86)\lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion
C:\ProgramData\lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion
C:\Users\Magic Pc\AppData\Roaming\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
C:\ProgramData\Application Data\lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion =>PUP.Optional.LavasoftWebCompanion

---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS (6) - 0s
https://nicolascoolman.eu/forum/Topic/winyahoo-logiciel-optionnel-potentiellement-indesirable-pup-lpi/ =>PUP.Optional.WinYahoo
https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>BitTorrent (P2P)
https://nicolascoolman.eu/forum/Topic/warning-eventlogapp-evenement-dapplication/ =>Warning.EventLogApp
https://nicolascoolman.eu/forum/Topic/warning-eventlogsys-evenement-systeme/ =>Warning.EventLogSys

---\\ NUMEROS DE SÉRIE
[034F328F3EFF4FB98F5343811788F78A] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc.dll =>.Tonec Inc.
[034F328F3EFF4FB98F5343811788F78A] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc64.dll =>.Tonec Inc.
[034F328F3EFF4FB98F5343811788F78A] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2.dll =>.Tonec Inc.
[034F328F3EFF4FB98F5343811788F78A] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2_64.dll =>.Tonec Inc.
[03C6ABDDE7AA440BC1990A06D53489DB] [29/09/2017] (.Adobe Systems Incorporated.) - C:\Program Files\Adobe\Adobe Photoshop CC 2018\Photoshop.exe =>.Adobe Systems Incorporated
[052BA8F6BF67588E836E2DFD1CA89C16] [04/09/2020] (.Spotify AB.) - C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.141.634.0_x86__zpdnekdrzrea0\Spotify.exe =>.Spotify AB
[06B922A8397E632FE5348DA267275B4F] [11/04/2018] (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
[06B922A8397E632FE5348DA267275B4F] [22/01/2019] (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HDBox\Uninstaller.exe =>.Adobe Systems Incorporated
[06C5078AA528BBD3B8668AB10B035F94] [01/08/2020] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc.
[06C5078AA528BBD3B8668AB10B035F94] [12/05/2020] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\Uninstall.exe =>.Tonec Inc.
[06C5078AA528BBD3B8668AB10B035F94] [14/03/2020] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe =>.Tonec Inc.
[06C5078AA528BBD3B8668AB10B035F94] [31/07/2020] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll =>.Tonec Inc.
[0C15BE4A15BB0903C901B1D6C265302F] [01/09/2020] (.Google LLC.) - C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll =>.Google LLC
[0C5396DCB2949C70FAC48AB08A07338E] [01/09/2020] (.Mozilla Corporation.) - C:\Users\Magic Pc\AppData\Roaming\Mozilla\Firefox\Profiles\mvkyktk7.default-release\gmp-gmpopenh264\1.8.1.1\gmpopenh264.dll =>.Mozilla Corporation
[0CEFAB1F7C07370C77DFB61C3CA4F5F0] [13/01/2019] (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe =>.Adobe Systems Incorporated
[0DDEB53F957337FBEAF98C4A615B149D] [31/08/2020] (.Mozilla Corporation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation
[0DDEB53F957337FBEAF98C4A615B149D] [31/08/2020] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation
[0DDEB53F957337FBEAF98C4A615B149D] [31/08/2020] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
[0EEF32C93E68FEA881AEEA7B438426D4] [04/08/2020] (.暇光软件科技（上海）有限公司.) - C:\Program Files\FormatFactory\FFInst.exe =>.暇光软件科技（上海）有限公司
[0EEF32C93E68FEA881AEEA7B438426D4] [04/08/2020] (.暇光软件科技（上海）有限公司.) - C:\Program Files\FormatFactory\FormatFactory.exe =>.暇光软件科技（上海）有限公司
[0EEF32C93E68FEA881AEEA7B438426D4] [04/08/2020] (.暇光软件科技（上海）有限公司.) - C:\Program Files\FormatFactory\FormatPlayer.exe =>.暇光软件科技（上海）有限公司
[0F9B76165D553FB5AE2E9BE0E7324A24] [12/02/2019] (.Adobe Systems Incorporated.) - C:\Program Files\Adobe\Adobe Premiere Pro CC 2019\Adobe Premiere Pro.exe =>.Adobe Systems Incorporated
[0FA5B80428F4624CF9672211E1956FBE] [14/08/2019] (.VideoLAN.) - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN
[0FE7C5F7C10716F0A4EB0D4B4D581371] [31/07/2014] (.Google Inc.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe =>.Google Inc
[13222A5DCCF716DF5AF9C87084412DD9] [23/10/2015] (.Realtek Semiconductor Corp.) - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
[13222A5DCCF716DF5AF9C87084412DD9] [23/10/2015] (.Realtek Semiconductor Corp.) - C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe =>.Realtek Semiconductor Corp
[13222A5DCCF716DF5AF9C87084412DD9] [23/10/2015] (.Realtek Semiconductor Corp.) - C:\WINDOWS\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp
[13222A5DCCF716DF5AF9C87084412DD9] [24/06/2015] (.Realtek Semiconductor Corp.) - C:\WINDOWS\System32\DRIVERS\RtsPer.sys =>.Realtek Semiconductor Corp
[13222A5DCCF716DF5AF9C87084412DD9] [29/06/2015] (.Realtek Semiconductor Corp.) - C:\WINDOWS\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp
[1D9FF0CFF14FE700963E52F6CDACF575] [20/08/2015] (.Synaptics Incorporated.) - C:\WINDOWS\System32\DRIVERS\SynRMIHID.sys =>.Synaptics Incorporated
[2912C70C9A2B8A3EF6F6074662D68B8D] [01/08/2014] (.Google Inc.) - C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc
[2912C70C9A2B8A3EF6F6074662D68B8D] [31/07/2014] (.Google Inc.) - C:\Program Files (x86)\Google\Picasa3\GPAutoBackup_Setup.exe =>.Google Inc
[332CAF63F76463D734C823DC3B93DC4C] [07/09/2020] (.LAVASOFT SOFTWARE CANADA INC.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe =>PUP.Optional.LavasoftWebCompanion
[332CAF63F76463D734C823DC3B93DC4C] [07/09/2020] (.LAVASOFT SOFTWARE CANADA INC.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe =>PUP.Optional.LavasoftWebCompanion
[332CAF63F76463D734C823DC3B93DC4C] [07/09/2020] (.LAVASOFT SOFTWARE CANADA INC.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanionInstaller.exe =>PUP.Optional.LavasoftWebCompanion
[4660FC32BD521D77F211C1336AA98B9E] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components\idmmzcc.dll =>.Tonec Inc.
[4660FC32BD521D77F211C1336AA98B9E] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc.dll =>.Tonec Inc.
[4660FC32BD521D77F211C1336AA98B9E] [01/09/2020] (.Tonec Inc..) - C:\Users\Magic Pc\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc64.dll =>.Tonec Inc.
[529E3F9FCF7D58D520D607AB74395002] [31/05/2020] (.win.rar GmbH.) - C:\Program Files\WinRAR\Rar.exe =>.win.rar GmbH
[529E3F9FCF7D58D520D607AB74395002] [31/05/2020] (.win.rar GmbH.) - C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH
[529E3F9FCF7D58D520D607AB74395002] [31/05/2020] (.win.rar GmbH.) - C:\Program Files\WinRAR\uninstall.exe =>.win.rar GmbH
[5CA430E4777412A8230BF839F782D4F7] [12/06/2017] (.Advanced Micro Devices Inc..) - C:\WINDOWS\System32\DRIVERS\amdkmcsp.sys =>.Advanced Micro Devices Inc.
[5CA430E4777412A8230BF839F782D4F7] [12/06/2017] (.Advanced Micro Devices Inc..) - C:\WINDOWS\System32\drivers\amdpsp.sys =>.Advanced Micro Devices Inc.
[6938B223FB5A2C2F44951C9E423A12E9] [27/07/2015] (.Qualcomm Atheros.) - C:\WINDOWS\System32\DRIVERS\btfilter.sys =>.Qualcomm Atheros
[6F13BCD50963D2F309439E37FD459C7C] [07/09/2020] (.BitTorrent Inc.) - C:\Users\Magic Pc\AppData\Roaming\uTorrent\helper\helper.exe =>BitTorrent (P2P)
[6F13BCD50963D2F309439E37FD459C7C] [07/09/2020] (.BitTorrent Inc.) - C:\Users\Magic Pc\AppData\Roaming\uTorrent\updates\3.5.5_45798.exe =>BitTorrent (P2P)
[6F13BCD50963D2F309439E37FD459C7C] [07/09/2020] (.BitTorrent Inc.) - C:\Users\Magic Pc\AppData\Roaming\uTorrent\updates\3.5.5_45798\utorrentie.exe =>BitTorrent (P2P)
[6F13BCD50963D2F309439E37FD459C7C] [07/09/2020] (.BitTorrent Inc.) - C:\Users\Magic Pc\AppData\Roaming\uTorrent\uTorrent.exe =>BitTorrent (P2P)
[72DCD35B1DBBF28F0F9848EC766A1BDF] [16/05/2017] (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\atiesrxx.exe =>.Advanced Micro Devices, Inc.
[72DCD35B1DBBF28F0F9848EC766A1BDF] [16/05/2017] (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\drivers\amdkmpfd.sys =>.Advanced Micro Devices, Inc.
[72DCD35B1DBBF28F0F9848EC766A1BDF] [16/05/2017] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys =>.Advanced Micro Devices, Inc.
[72DCD35B1DBBF28F0F9848EC766A1BDF] [16/05/2017] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys =>.Advanced Micro Devices, Inc.
[72DCD35B1DBBF28F0F9848EC766A1BDF] [24/04/2017] (.Advanced Micro Devices, Inc..) - C:\Program Files (x86)\AMD\CNext\CCCSlim\CCC.exe =>.Advanced Micro Devices, Inc.
[72DCD35B1DBBF28F0F9848EC766A1BDF] [24/04/2017] (.Advanced Micro Devices, Inc..) - C:\Program Files\AMD\CNext\CNext\cncmd.exe =>.Advanced Micro Devices, Inc.
[72DCD35B1DBBF28F0F9848EC766A1BDF] [24/04/2017] (.Advanced Micro Devices, Inc..) - C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe =>.Advanced Micro Devices, Inc.
[7828C7315808BC8717710E13FA3C0B24] [02/05/2019] (.Tonec Inc..) - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll =>.Tonec Inc.
[7828C7315808BC8717710E13FA3C0B24] [20/12/2018] (.Tonec Inc..) - C:\WINDOWS\System32\DRIVERS\idmwfp.sys =>.Tonec Inc.

~ Unselected Options: WR, O82,
~ End of the scan, 6887 items in 14mn34s (1841)(0)